BR102018070805A2 - SERVICE SUPPORT DEVICE, SERVICE SUPPORT METHOD AND NON-TRANSITORY COMPUTER LEGIBLE RECORDING MACHINE - Google Patents

Abstract

"Service Support Device, Service Support Method and Non-Transient Computer Readable Recording Medium" The present invention relates to a service support device (30) including an information processing device. the information processing device is configured to provide key information to a mobile terminal (20; 20ac; 20ad; 20b). the mobile terminal corresponds to each of a plurality of commercial operators providing a vehicle user (10; 10a; 10b) with a predetermined service using the vehicle. Key information is information for unlocking the vehicle, starting the vehicle, or unlocking and starting the vehicle when a predetermined transmission signal is transmitted towards the vehicle. the information processing device is configured to, when the mobile terminal, corresponding to a first commercial operator, among the plurality of commercial operators, uses the key information, to perform the coordination, so that the mobile terminal, corresponding to a second commercial operator, among the plurality of commercial operators, do not use the key information.

Description

Invention Patent Descriptive Report for SERVICE SUPPORT DEVICE, SERVICE SUPPORT METHOD AND LEGIBLE RECORDING MEDIA BY NON-TRANSITIONAL COMPUTER.

BACKGROUND OF THE INVENTION

1. Field of the Invention [001] The invention relates to a service support device, a service support method and a non-transitory computer-readable recording medium.

2. Description of Related Art [002] For example, a key information management system is described (see, for example, publication of unexamined Japanese patent application No. 2006-118122 (JP 2006-118122 A). key information management system, a mobile terminal receives the key information that is transmitted from a server and then the mobile terminal is usable as an electronic key. SUMMARY OF THE INVENTION [003] When the key information that allows a vehicle to be unlocked or started for a limited time is provided to a mobile terminal of a third party in addition to a vehicle user, it is conceivable that various services can be provided to the vehicle user. car sharing that assists in renting a vehicle between individuals (consumer to consumer (C2C)) (hereinafter referred to as C2C car sharing service). C2C car sharing service is provided as follows. In a period of time during which a user does not use the vehicle, the key information that allows a vehicle to be unlocked and started for a limited time is provided to a mobile terminal of a person who wishes to temporarily rent the vehicle. There is also, for example, a

Petition 870180139491, of 10/09/2018, p. 81/301

2/114 delivery service that allows the trunk of a vehicle to be designated as a delivery address for a package (hereinafter referred to as the delivery service for the trunk). The delivery service for the trunk is provided as follows. Key information that allows the trunk of a vehicle to be unlocked for a limited time is provided to a mobile terminal of a courier from a delivery company.

[004] However, if there are a plurality of commercial operators that provide the services described above using a vehicle, the commercial operators' mobile terminals can possibly acquire key information available at the same time. For this reason, there is room for improvement from the point of view of vehicle safety.

[005] The invention provides a service support device, a service support method and a non-transitory computer-readable recording medium, which can improve the safety of a vehicle when a plurality of commercial operators each provide a service using the vehicle based on the key information that is provided for a mobile terminal.

[006] A first aspect of the invention provides a service support device. The service support device includes an information processing device. The information processing device is configured to provide key information to a mobile terminal. The mobile terminal corresponds to each of a plurality of commercial operators that provide a vehicle user with a predetermined service using the vehicle. Key information is information for unlocking the vehicle, starting the vehicle, or unlocking and starting the vehicle when a predetermined transmission signal is transmitted to the vehicle. The information processing device is configured to, when the

Petition 870180139491, of 10/09/2018, p. 82/301

3/114 mobile terminal corresponding to a first commercial operator, among the plurality of commercial operators, uses the key information, coordinate so that the mobile terminal corresponding to a second commercial operator, among the plurality of commercial operators, does not use the information of key.

[007] According to this aspect, when a plurality of commercial operators each provide a service using the vehicle, the service support device is able to perform the coordination so that only the mobile terminal corresponding to the first commercial operator can use the key information at the same time. Therefore, when a plurality of commercial operators each provide a service using the vehicle, it is possible to improve vehicle safety.

[008] In the above aspect, the information processing device can be configured to limit the key information that is provided to the mobile terminal corresponding to the first commercial operator so that the key information is only available in a first period, and limit the key information that is provided to the mobile terminal corresponding to the second commercial operator, so that the key information is only available in a second period that does not conflict with the first period.

[009] According to this aspect, the service support device can prevent a conflict between a period during which the mobile terminal corresponding to the first commercial operator uses the key information and a period during which the mobile terminal corresponding to the second commercial operator uses the key information. Therefore, the service support device is specifically capable of performing coordination so that only the mobile terminal corresponding to the first commercial operator can use the InPetition 870180139491, of 10/9/2018, p. 83/301

4/114 key formation at the same time.

[0010] In the above aspect, the predetermined service can be any one of a delivery service that allows a vehicle luggage compartment to be designated as a delivery address for a package, a collection service that allows baggage sharing is designated as a collection address for a package, and a collection service that allows the baggage compartment to be designated as a collection address for an item, the information processing device can be configured to deliver key information to each of a plurality of mobile worker terminals that conduct work for package delivery, package collection or article collection, the work corresponding to the predetermined service, and the information processing device is configured for, when a worker corresponds the first commercial operator, among the workers, is carrying out the work based on the uti use of key information by the worker's mobile terminal corresponding to the first commercial operator, disable the use of the key information acquired by a worker's mobile terminal corresponding to the second commercial operator, among workers until the worker corresponding to the first commercial operator ends the job.

[0011] According to this aspect, the service support device can disable the use of the key information acquired by the mobile terminal of the worker of the second commercial operator until the worker of the first commercial operator who provides a delivery service for carrier suitcases, or similar, finish the job, such as delivery. Therefore, the service support device is specifically capable of activating only the worker's mobile terminal, corresponding to the first commercial operator among the plurality of

Petition 870180139491, of 10/09/2018, p. 84/301

5/114 commercial operators who provide a trunk delivery service, or similar, to use key information at the same time.

[0012] In the above aspect, the predetermined service can be any one of a delivery service that allows a vehicle luggage compartment to be designated as a delivery address for a package, a collection service that allows the luggage compartment is designated as a collection address for a package, and a collection service that allows the baggage compartment to be designated as a collection address for an item, the information processing device is configured to provide the key information for each one of a plurality of mobile terminals of the workers who conduct the work for the delivery of the package, collection of the package, or collection of the article, the work corresponding to the predetermined service, the information processing device can be configured for, when a mobile terminal of a worker, corresponding to the first commercial operator, among the workers, reached an area within o of a predetermined range with respect to the vehicle, deliver the key information to the worker's mobile terminal corresponding to the first commercial operator, the information processing device can be configured to, when a worker's mobile terminal, corresponding to the second operator among workers, reaches the area within the predetermined range from the vehicle, in a situation in which the worker, corresponding to the first commercial operator, is carrying out work based on the use of key information by the worker's mobile terminal, corresponding to the first commercial operator, supplying the key information to the worker's mobile terminal, corresponding to the second commercial operator, at a time in

Petition 870180139491, of 10/09/2018, p. 85/301

6/114 which worker, corresponding to the first commercial operator, finished the job.

[0013] According to this aspect, the service support device can disable the delivery of key information to the mobile terminal of the worker of the second commercial operator, who came close to the vehicle, until the worker of the first commercial operator who provides a trunk delivery service, finish the job, such as delivering a package to a vehicle trunk. Therefore, the service support device is specifically capable of activating only the worker's mobile terminal corresponding to the first commercial operator among the plurality of commercial operators that provide a trunk delivery service, or similar, to use the key information at the same time.

[0014] In the above aspect, the predetermined service can be any one of a delivery service that allows a vehicle luggage compartment to be designated as a delivery address for a package, a collection service that allows the luggage compartment be designated as a collection address for a package, and a collection service for an item, the information processing device can be configured to provide key information for each of a plurality of mobile terminals of the workers who conduct the work for package delivery, package collection, or article collection, the job corresponding to the predetermined service, the information processing device can be configured to limit the number of times that key information is available to a predetermined number of times, and the information processing device can be configured for, when a mobile terminal of a worker corresponding to the first commercial operator, among the workers, used all key information by the pre-petition number 870180139491, of 10/09/2018, p. 86/301

7/114 finished times, provide the key information for the mobile terminal of a worker corresponding to the second commercial operator, among the workers.

[0015] According to this aspect, the service support device can configure the number of times (for example, twice to unlock and lock, or the like) of using the key information required from each of the workers among the plurality commercial operators who provide a delivery service for trunk, or the like, to do the job, such as delivering a package in a vehicle trunk, for the predetermined number of times. For this reason, the service support device can disable the provision of key information to the mobile terminal of the worker of the second commercial operator, who arrived close to the vehicle, until the worker of the first commercial operator finishes the job, such as delivery of a package to the vehicle's trunk. Therefore, the service support device is specifically capable of allowing only the worker's mobile terminal, corresponding to the first commercial operator, among the plurality of commercial operators that provide a delivery service for trunk, or similar, to use the information key at the same time.

[0016] In the above aspect, the information processing device can be configured to relay, in a bidirectional way, the information between the worker's mobile terminal corresponding to the first commercial operator and the worker's mobile terminal, corresponding to the second commercial operator.

[0017] According to this aspect, the service support device can allow the first and second commercial operators that provide a delivery service for trunk, or similar, to make direct contact with each other. For this reason, for example, when there is a package from the first commercial operator and a paPetition 870180139491, from 10/09/2018, p. 87/301

8/114 quote from the second commercial operator and the same delivery time period is assigned to these packages, it is possible to allow a worker from the first commercial operator and a worker from the second commercial operator to adjust the specific delivery time. Therefore, the service support device can enhance the convenience, and the like, of a plurality of commercial operators who provide a trunk delivery service, or the like.

[0018] In the above aspect, the information processing device can be configured to, when a vehicle usage schedule, associated with the predetermined service corresponding to the first commercial operator, is configured in a first period, to maintain a period that conflicts with the first period so that a vehicle usage schedule, associated with the predetermined service corresponding to the second commercial operator, is not configured in the period.

[0019] According to this aspect, the service support device can prevent a conflict between a period of time during which the vehicle is used for a service that is provided by the first commercial operator and a period of time during which the vehicle is used for a service that is provided by the second commercial operator. Therefore, the service support device is specifically capable of coordinating so that only the mobile terminal corresponding to the first commercial operator can use the key information at the same time.

[0020] In the above aspect, the predetermined service may include a delivery service that allows a vehicle luggage compartment to be designated as a delivery address for a product that is ordered on a web site corresponding to e-commerce, and the information processing device can be configured for, when a first period of time has already been

Petition 870180139491, of 10/09/2018, p. 88/301

9/114 designated as a delivery time period for the product with the delivery service corresponding to the first commercial operator, disable the vehicle user from selecting a time period that conflicts with the first time period on the same date on the web site as a delivery time period for a product with the delivery service corresponding to the second commercial operator.

[0021] According to this aspect, at the moment when the vehicle user places an order for a product on an EC website, the service support device can disable selection of a period of time that conflicts with a period of time of delivery that has already been designated for a product by the first trader as a delivery time period for a product by the second trader. Therefore, the service support device is specifically capable of allowing only the mobile terminal of a worker corresponding to the first commercial operator, among the plurality of commercial operators that provide a delivery service for trunk for delivery of a product purchased in an EC site uses the key information at the same time.

[0022] In the above aspect, the vehicle user can be a regular vehicle user.

[0023] According to this aspect, it is possible to improve vehicle safety for a service intended for a regular vehicle user.

[0024] In the above aspect, the service support device may include a communication device configured to carry out, in a bidirectional manner, communication with each of the vehicle, the mobile terminal, and an external device through a predetermined communication network. .

[0025] In the above aspect, the key information may include adiPetition 870180139491, from 10/09/2018, p. 89/301

10/114 the information to lock the vehicle.

[0026] In the above aspect, the predetermined transmission signal may include the key information.

[0027] A second aspect of the invention is implemented by a service support method that is performed by a service support device. The service support method includes providing the key information to a mobile terminal, the mobile terminal corresponding to each of a plurality of commercial operators that provide a vehicle user with a predetermined service using the vehicle, the information of key being the information to unlock the vehicle, start the vehicle, or unlock and start the vehicle when a predetermined transmission signal is transmitted to the vehicle and, when the mobile terminal corresponds to a first commercial operator, among the plurality of operators commercials, uses the key information, perform coordination so that the mobile terminal corresponding to a second commercial operator, among the plurality of commercial operators, does not use the key information.

[0028] A third aspect of the invention provides a non-transitory computer-readable recording medium by storing a service support program by having an information processing device execute instructions for providing the key information to a mobile terminal, the terminal mobile corresponding to each of a plurality of commercial operators that provide a vehicle user with a predetermined service using the vehicle, the key information being the information to unlock the vehicle, start the vehicle, or unlock and start the vehicle when a predetermined transmission signal is transmitted towards the vehicle; and when the mobile terminal, corresponding to a first commercial operator, among the plurality of

Petition 870180139491, of 10/09/2018, p. 90/301

11/114 commercial operators use the information, coordinating it so that the mobile terminal corresponding to a second commercial operator, among the plurality of commercial operators, does not use the key information.

[0029] In accordance with the above aspects, it is possible to provide a service support device, a service support method, and a non-transitory computer-readable recording medium, which can improve the safety of a vehicle when a plurality commercial operators each provide a service using the vehicle based on the key information that is provided for a mobile terminal.

BRIEF DESCRIPTION OF THE DRAWINGS [0030] Characteristics, advantages and technical and industrial significance of the illustrative modalities of the invention will be described below with reference to the attached drawings, in which similar numerical references denote similar elements, and where:

[0031] figure 1 is a diagram that illustrates an example of the general configuration of an authentication key management system;

[0032] figure 2 is a block diagram that basically illustrates an example of the components related to the locking and unlocking of a vehicle in the authentication key management system;

[0033] figure 3 is a block diagram that basically illustrates an example of the components related to a key sharing service in the authentication key management system;

[0034] figure 4 is a block diagram that basically illustrates an example of components related to a delivery service in the trunk in the authentication key management systemPetition 870180139491, from 10/09/2018, pg. 91/301

11/114 tion;

[0035] Figure 5 is a block diagram that basically illustrates an example of the components related to a C2C car sharing service in the authentication key management system;

[0036] Figure 6 is a block diagram that basically illustrates an example of the components related to a B2C car sharing service in the authentication key management system;

[0037] figure 7 is a flowchart that schematically illustrates an example of a coordination process that is performed by a central server;

[0038] figure 8 is a flowchart that schematically illustrates another example of the coordination process that is performed by the central server;

[0039] figure 9 is a flowchart that schematically illustrates another additional example of the coordination process that is performed by the central server; and [0040] figure 10 is a flowchart that schematically illustrates another example of the coordination process that is performed by the central server.

DETAILED DESCRIPTION OF THE MODALITIES [0041] Hereinafter, a modality of the invention will be described with reference to the attached drawings.

General Configuration of the Authentication Key Management System [0042] Figure 1 is a diagram that illustrates an example of the general configuration of an authentication key management system, according to the present modality.

[0043] The authentication key management system 1

Petition 870180139491, of 10/09/2018, p. 92/301

11/13 includes vehicles 10, mobile terminals 20, a central server 30, and service management servers 40.

[0044] Each vehicle 10 can carry out wireless communication within a relatively close range (such a range that communication is available between the interior of a vehicle cabin and the exterior of the vehicle cabin) to the mobile terminals 20 (hereinafter referred to as near field communication) in accordance with predetermined communication standards. Each vehicle 10 is an object from which the doors are locked or unlocked and which is switched on (ignition is turned) based on a transmission signal (an authentication request, a request to lock, or a request to unlock, which will be described later) from one of the mobile terminals 20. The doors of each vehicle 10 may include not only the passenger doors, but also a luggage compartment door (for example, a trunk lid, a rear door or the like) ) to access a trunk (luggage compartment). Turning on the ignition (IG-ON) of each vehicle 10 may include not only starting an engine in the vehicle 10 that uses the engine as a main energy source, but also to power an electric motor in the vehicle 10 that uses an electric motor as a main energy source. Henceforth, in the present modality, the description will be made regarding the consideration that each vehicle 10 uses an engine 117 (described later) as a main energy source, a start (IG-ON) of each vehicle 10 corresponding to an engine initialization 117 and a stop (IG-OFF) for each vehicle 10 corresponds to an engine stop 117.

[0045] Vehicles 10 are communicatively connected to the central server 30 via a predetermined communication network (for example, a mobile telephone network having a large number of base stations such as terminals, the Internet, or the like).

Petition 870180139491, of 10/09/2018, p. 93/301

11/144

Each vehicle 10 transmits the location information to the central server 30, as will be described later.

[0046] Vehicles 10 include a private vehicle 10A and a vehicle 10B owned by the car sharing service provider B2C.

[0047] The mobile terminals 20 are communicatively connected to the central server 30 through a predetermined communication network (for example, a mobile telephone network having a large number of base stations such as terminals, the Internet, or the like). Each mobile terminal 20 can unlock or lock the desired vehicle 10 by acquiring authentication key information (an example of the key information; hereinafter referred to as the authentication key) that is provided from the central server 30 and transmission of the key. authentication acquired by wireless communication of relatively short range in response to a predetermined user operation. Each mobile terminal 20 can be, for example, a general cell phone, a smartphone, or a tablet terminal. Each mobile terminal 20 can implement the function described above by launching a predetermined application program (hereinafter, referred to as a key application) that is installed on an embedded processing device 23, as will be described later. Each mobile terminal 20 can be a portable special purpose terminal specialized in acquiring an authentication key from the central server 30, and for unlocking the doors of the desired vehicle 10 and starting the desired vehicle 10 using the authentication key acquired. Mobile terminals 20 include mobile terminals 20Aa, 20Ab, 20Ac, 20Ad corresponding to vehicle 10A, and a mobile terminal 20B corresponding to vehicle 10B.

[0048] The mobile terminal 20A is a mobile terminal owned by an owner (owner user) among regular users

Petition 870180139491, of 10/09/2018, p. 94/301

15/114 of vehicle 10A. The mobile terminal 20A can be communicated in a bidirectional manner with the mobile terminal 20Ab by wireless communication of relatively short range.

[0049] The 20Ab mobile terminal is a mobile terminal owned by each of the regular users in addition to the owner of the vehicle 10A (for example, including a member of the owner user's family, a close friend of the owner user, and the like; hereinafter referred to as child users).

[0050] Child users can include a user who does not drive the 10A vehicle and a user who is not allowed to drive the 10A vehicle (for example, a child under 18 years of age of the owner user, or similar). For example, when only a trunk delivery service (described later) is used, regular users do not need to drive the 10A vehicle.

[0051] The 20Ac mobile terminal is owned by a delivery operator from a commercial operator who provides delivery service for luggage racks (described later) (hereinafter, simply referred to as the delivery service provider). The mobile terminal 20Ac is communicatively connected to the central server 30 and a delivery management server 50 (described later) through a predetermined communication network (for example, a mobile telephone network having a large number of base stations as terminals , the Internet, or the like).

[0052] The 20Ad mobile terminal is a mobile terminal owned by a tenant of vehicle 10A in a C2C car sharing service (described later). The mobile terminal 20Ad is communicatively connected to the central server 30 and to a C2C 70 car sharing management server (described later) through a predetermined network (for example, a mobile phone network having a large number of stations. 870180139491 , of 10/09/2018, page 95/301

16/114 base stations such as terminals, the Internet, or similar).

[0053] Mobile terminal 20B is a mobile terminal owned by a tenant of vehicle 10B in a B2C car sharing service (described later). Mobile terminal 20B is communicatively connected to central server 3 and a B2C car sharing management server 80 via a predetermined communication network (for example, a mobile phone network having a large number of base stations as terminals , the Internet, or the like).

[0054] Central server 30 is communicatively connected to vehicles 10, mobile terminals 20 and service management servers 40.

[0055] Central server 30 (an example of a service support device) manages the issuance of an authentication key for each vehicle 10. For example, central server 30 issues an authentication key and provides the authentication key for the desired mobile terminal 20 in response to a predetermined condition.

[0056] Central server 30 also acquires location information for each vehicle 10 from vehicle 10. In this way, central server 30 can obtain the location of each vehicle 10.

[0057] Central server 30 also operates a car sharing device to share vehicle 10A among a plurality of regular users including the owner of vehicle 10A. Specifically, the central server 30 operates an authentication key sharing service (key sharing service) that each of the regular registered users, including the owner user, can acquire the vehicle 10A authentication key on their own mobile terminal 20 (the mobile terminal 20Aa or the mobile terminal 20Ab).

[0058] The central server 30 also performs a rePetition process 870180139491, from 10/09/2018, p. 96/301

17/114 registration for regular users of vehicle 10A to use a service using vehicle 10A (the key sharing service, the trunk delivery service, the C2C car sharing service or similar). Specifically, central server 30 registers permission for regular users of vehicle 10A to use a service using vehicle 10A. The permission is the permission to provide an authentication key for a predetermined mobile terminal 20 (hereinafter referred to as an authentication key disposition permission) as one of a key sharing management unit 327 (described later) and the service management servers 40 transmit an authentication key disposition request (described later) to the central server 30.

[0059] The central server 30 also manages the situations and use of vehicle 10A among a plurality of services (that is, a plurality of commercial operators), such as the delivery service for trunk (described later) and the delivery service. C2C car sharing (described later).

[0060] Service management servers 40 manage the operations of the various services that are provided by using vehicles 10. Service management servers 40 include delivery management server 50 and an ecommerce server (EC) 60 which corresponds to the trunk delivery service, the C2C 70 car sharing management server which corresponds to the C2C car sharing service, and the B2C 80 car sharing management server which corresponds to the car sharing device B2C.

[0061] The delivery service for trunk can include a delivery service to handle the products ordered on an EC site

Petition 870180139491, of 10/09/2018, p. 97/301

18/114 (described later) as delivery items and a delivery service to handle items in addition to the products ordered on the EC website as delivery items. The latest trunk delivery service, for example, is a service that allows regular users of the 10A vehicle to change the delivery address for the 10A vehicle trunk when a notification that a package addressed to the home is propagated to be delivered was provided from the delivery management server 50 to the regular user through an email, a social network service account (SNS), or a specific application program that is launched on the mobile terminal 20Aa or on the mobile terminal 20Ab. Henceforth, in this modality, the first delivery service for trunk will be basically described. Component operations related to the trunk delivery service (described later) are also applicable to component operations related to the latest trunk delivery service where appropriate.

[0062] The delivery management server 50 is communicatively connected to the mobile terminal 20Ac and to the central server 30 through a predetermined communication network. The delivery management server 50 manages the operations of a logistics system associated with the delivery service for trunk from the receipt of a package to the delivery of the package in the trunk of vehicle 10A.

[0063] The delivery service provider that operates the delivery management server 50 can provide regular users of the 10A vehicle not only with the trunk delivery service, but also a collection service that allows the trunk be designated as a collection address for a package (hereinafter referred to as a trunk collection service). That is, the delivery management server 50 can manage the operations of the

Petition 870180139491, of 10/09/2018, p. 98/301

19/114 trunk collection service instead of or in addition to trunk delivery service. In this case, a package that is a collection item can be a product that is returned to an EC site operator (or a store opened on the EC site) corresponding to the EC 60 server (that is, a product purchased on the EC site) or it may be a delivery package irrelevant to the EC site. The boot collection service can be performed as a collection service when a commercial operator providing a service for the temporary maintenance of a customer item (for example, a commercial operator, such as a commercial laundry) collects a regular user package of the 10A vehicle. In this case, a collection management server that manages the operations of the collection service in the trunk, which can be included on service management servers 40, in addition to the delivery management server 50, can be provided by a service provider. commercial laundry. That is, the collection management server can be provided instead of or in addition to the delivery management server 50. A commercial operator that provides a collection service for a predetermined item (an item, such as a scrap or book) second hand that a customer wants to sell) from a customer (for example, a recycling service provider, an antique buyer, or the like) provides regular users of the 10A vehicle with a collection service that allows the trunk to be designated as a collection address for an item that is a collection item (hereinafter referred to as the collection service in the trunk). In this case, a collection management server that manages the operations of the collection service in the trunk, which may be included on service management servers 40, in addition to the delivery management server 50, may be provided by a service provider. recycling service, or similar. That is, the collection management server can be provided. 870180139491, from 10/09/2018, p. 99/301

11/204 instead of or in addition to the delivery management server 50.

[0064] The EC server 60 is communicatively connected to the central server 30 and the delivery management server 50 through a predetermined communication network, and operates a predetermined network site (EC site) that sells the items or services. Specifically, the EC 60 server displays the trunk of the vehicle 10A as a choice for the delivery address on an order page of the EC website for regular pre-registered users of the vehicle 10A and the delivery service provider (the delivery service provider). delivery service corresponding to the delivery management server 50). In this way, regular users of the 10A vehicle can obtain delivery of products purchased in the trunk of the 10A vehicle even when regular users are not at home.

[0065] The C2C 70 car sharing management server is communicatively connected to the 20Ad mobile terminal and the central server 30. The C2C 70 car sharing management server manages the operations of the 2C car sharing service, such as receiving recording a 10A vehicle rental date and time from the owner user, receiving a usage reservation from a person who wants to rent the 10A vehicle, and provisions for the 10A vehicle authentication key. The C2C 70 car sharing management server can manage the operations of a C2C trunk sharing service to rent a cabin or trunk of the private vehicle 10A as a temporary luggage storage, a delivery address for a package or similar.

[0066] The car sharing management server

B2C 80 is communicatively connected to the mobile terminal 20B and the central server 30. The share management server Petition 870180139491, of 10/09/2018, p. 100/301

11/21 B2C car management 80 manages the operations of the B2C car sharing service, such as receiving a reservation for the use of vehicle 10B and making provisions for a parking location of vehicle 10B and the authentication key of the vehicle. vehicle 10B. The B2C 80 car sharing management server can manage the operations of a B2C trunk sharing service to rent the cabin or trunk of the 10B vehicle as a temporary luggage storage or delivery address for a package .

[0067] Service management servers 40 may include a company car management server that operates a car sharing service (company car management service) in which vehicle 10, which is a company car it serves to reserve usage and an employee of the company is the one who borrows, instead of or in addition to the B2C 80 car sharing management server. At that moment, when there is an idle period of the vehicle 10 which is a car company, the company car management server can operate a C2C car sharing service in which vehicle 10 which is a company car is intended for rental. The delivery management server 50 and the EC 60 server can operate a trunk delivery service that allows the trunk of vehicle 10, which is a company car, to be designated as a delivery address for a package that is intended for the company.

Detailed Components Related to Locking and Unlocking the Vehicle and Starting the Vehicle [0068] The following are the components related to locking and unlocking each vehicle 10 and starting each vehicle 10 in the key management system. authentication 1 will be described with reference to figure 2.

Petition 870180139491, of 10/09/2018, p. 101/301

22/114 [0069] Figure 2 is a block diagram that basically illustrates an example of the components related to the locking and unlocking of each vehicle 10 and the departure of each vehicle 10 in the authentication key management system 1. Each vehicle 10 includes a device for locking / unlocking and starting 11, a key unit 12, a GPS module 13, and a data communication module (DCM) 14.

[0070] The device for locking / unlocking and starting 11 is installed in the vehicle 10, and locks or unlocks the doors of the vehicle 10 in response to a lock signal or an unlock signal that is transmitted from the key unit 12 as radio waves from a radio frequency (RF) band (for example, 300 MHz to 3 GHz) (hereinafter referred to as RF radio waves). The locking / unlocking and starting device 11 starts vehicle 10 in response to an exchange of radio waves from a low frequency band (LF) (for example, 30 Hz to 300 kHz) (hereinafter referred to as radio LF) and RF radio waves with the switch unit 12 with a drive set for pressing a starter switch (not shown) provided in the cabin of the vehicle 10. The locking / unlocking and starting device 11 includes an LF 111 radio wave transmitter, an RF radio wave receiver 112, an electronic build control unit (ECU) 113, a body ECU 114, engines to lock doors 115, an engine ECU 116, and the engine 117 which is a source of driving force for the vehicle 10.

[0071] The device for locking / unlocking and starting 11 is activated by the electrical energy that is supplied from an auxiliary battery (not shown) mounted on the vehicle 10.

[0072] The radio wave transmitter LF 111 is incorporated, for example, into a central console or a knob in the cabin, and transmission 870180139491, from 10/09/2018, pg. 102/301

23/114 t and LF radio waves under the control of the 113 build ECU.

[0073] The RF radio wave receiver 112 is provided, for example, in a finish in a luggage compartment of the vehicle 10, and receives RF radio waves under the control of the 113 build ECU.

[0074] The compilation ECU 113 is an electronic control unit that controls the locking and unlocking of the vehicle 10 doors and starts the vehicle 10 based on a signal exchange with the key unit 12. The compilation ECU 113 is implemented by hardware, software or a combination of hardware and software. For example, build ECU 113 is basically made up of a microcomputer including a central processing unit (CPU), a random access memory (RAM), a read-only memory (ROM), an auxiliary storage device, a clock real time (RTC) and a communication interface. The build ECU 113 implements various control processes by executing various programs stored in the ROM or the auxiliary storage device on the CPU. Henceforth, the same applies to a key 124 ECU (described later).

[0075] The compilation ECU 113 receives a signal to unlock and a signal to lock which are transmitted from key unit 12 as RF radio waves using the RF radio wave receiver 112.

[0076] When the build ECU 113 receives the unlock signal or the lock signal, the build ECU 113 authenticates the source (key unit 12) of the unlock signal or signal to lock based on the key information (hereinafter , referred to as internal key information) included in the signal to unlock or the signal to lock. For example, when the internal key information that is registered in advance in an internal memory, such as

Petition 870180139491, of 10/09/2018, p. 103/301

24/114 the auxiliary storage device, matches the internal key information included in the signal to unlock or the signal to lock, the build ECU 113 determines that authentication has been successful. On the other hand, when some parts of the internal key information do not match, the compilation ECU 113 determines that authentication has failed.

[0077] For example, the compilation ECU 113 can transmit LF radio waves including the challenge generated by a predetermined method by using the internal key information from the internal memory, from the LF 111 radio wave transmitter towards the unit key 12 and can perform challenge response authentication based on the response that was returned from key unit 12 and that was received by RF radio wave receiver 112.

[0078] When authentication is successful, the build ECU 113 transmits an instruction to unlock (upon receipt of the signal to unlock) or an instruction to lock (after receiving the signal to lock) to the body ECU 114 through a network built into the vehicle, such as a controller area network (CAN).

[0079] As will be described later, in the sign to unlock, only the part of the vehicle doors 10 can be designated as a door to be unlocked. In that case, build ECU 113 designates the doors to be unlocked with the instruction to unlock. In this way, the body 114 ECU can unlock part of the doors by activating only the door lock motors 115 corresponding to the designated part of the doors.

[0080] When the starter switch is pressed, build ECU 113 authenticates key unit 12 by exchanging signals with key unit 12 using the LF 111 radio wave transmitter and RF radio wave receiver 112 .

Petition 870180139491, of 10/09/2018, p. 104/301

25/114 [0081] For example, build ECU 113 transmits an LF band request signal to request an internal key information response from the LF radio wave transmitter 111 in the direction of switch unit 12. When the response signal, including the internal key information, was received from the key unit 12 by the RF radio wave receiver 112, the build ECU 113 determines whether authentication was successful or authentication failed based on the match between the internal key information registered in the internal memory in advance and the internal key information included in the response signal, as in the case of locking or unlocking the doors.

[0082] For example, the build ECU 113 can perform challenge response authentication, as in the case of locking or unlocking the doors.

[0083] When authentication is successful, build ECU 113 transmits an instruction to start engine 117 to engine ECU 116 via the vehicle's built-in network, such as CAN.

[0084] The body ECU 114 is an electronic control unit that controls the activation of each of the door lock motors 115 that are communicatively connected to the body ECU 114 through communication lines, one by one, or similar. Body ECU 14 sends a control instruction to have door lock motors 115 perform the unlock action in response to the build ECU 113 unlock instruction. Body ECU 114 also sends a control instruction to cause the motors to lock the door 115 to perform the locking action in response to the instruction to lock the build ECU 113.

[0085] Each of the motors to lock door 115 is a known electric actuator that unlocks or locks a corresponding door. Petition 870180139491, of 10/9/2018, p. 105/301

26/114 pondering among vehicle 10 doors in response to an ECU control instruction from body 114.

[0086] The engine ECU 116 is an electronic control unit that controls the activation of the engine 117. Specifically, the engine ECU 116 controls the activation of several actuators, such as a starter and an injector, mounted on the engine 117 When a start instruction is recorded from build ECU 113, engine ECU 116 causes engine 117 to be started by sending a control instruction to the various actuators, such as the start device and injector of the engine. engine 117.

[0087] The key unit 12 is arranged in the cab of the vehicle 10. The key unit 12 transmits any of the unlock signal and the lock signal as RF radio waves to the lock / unlock and start device 11 in response to a corresponding request to unlock and lock, which is transmitted from mobile terminal 20. Additionally, the moment the starter switch provided in the vehicle cabin 10 is pressed, the key unit 12 exchanges signals with the device locking / unlocking and starting 11 in response to an LF band signal that is transmitted from the locking / unlocking and starting device 11. The key unit 12 includes a radio wave receiver LF 121, a radio transmitter RF radio waves 122 a communication device 123 and the key ECU 124.

[0088] The key unit 12 can be arranged in a location where the key unit 12 is difficult to be visually recognized by users sitting in the respective seats of the vehicle 10 (for example, inside a glove box or center console, or similar). The key unit 12 can be attached to vehicle 10 or not. The key unit 12 can be activated by a built-in button battery, or the like, or it can be activated by the electric power that is supplied in part 870180139491, of 10/09/2018, pg. 106/301

27/114 from an auxiliary battery mounted on the vehicle 10.

[0089] The LF radio wave receiver 121 receives LF radio waves under the control of key 124 ECU.

[0090] The RF radio wave transmitter 122 transmits RF radio waves under the control of key 124 ECU.

[0091] Communication device 123 is any device that performs near-field communication with mobile terminals 20 under the control of key ECU 124. Communication device 123 can be, for example, a BLE communication module that performs communication with mobile terminals 20 in accordance with BLE communication standards. BLE is an abbreviation for low-energy Bluetooth. Bluetooth is a registered trademark. Henceforth, the description will be made considering that the communication standards employed in the communication device 123 adhere to the BLE communication.

[0092] Communication device 123 can be a communication device that adheres to short-range communication standards for a significantly short communicable range, such as near field communication (NFC) standards. In this case, the communication device 123 can be incorporated in a location close to a body surface outside the vehicle cabin 10 (this is, for example, a location within a door handle). Thus, even when a communicable range of the communication device 123 is significantly short, the key unit 12 (key ECU 124) can communicate with mobile terminals 20 outside the cabin.

[0093] The key ECU 124 is an electronic control unit that performs a transmission control process from any of the lock and unlock signals to the lock / unlock and start device 11 in response to a color request Petition 870180139491, of 10/9/2018, p. 107/301

11/28 respondent between the request to lock and the request to unlock, which is received from the mobile terminal 20.

[0094] Key ECU 124 receives an authentication request including an authentication key associated with key unit 12 from mobile terminal 20 via communication device 123.

[0095] When an authentication request including the authentication key associated with key unit 12 has been received from mobile terminal 20, key ECU 124 authenticates mobile terminal 20 based on the authentication key. When authentication is successful, the key ECU 124 restores the internal key information stored in the internal memory, such as the auxiliary storage device, to a usable state. The internal key information is stored in a state in which the internal key information is not usable as a use for authentication on the lock / unlock and start device 11, such as an inaccessible state and an encrypted state. For this reason, when authentication of the mobile terminal 20 is successful, the key ECU 124, for example, changes the internal memory access permission to change the key information in an accessible state or decodes the internal key information. encrypted based on the authentication key. In this way, the key ECU 124 can transmit an unlock signal or lock signal, including the internal key information to the lock / unlock device and start 11 by accessing the internal key information normally inaccessible, or transmission from a unlock signal or lock signal, including the decoded internal key information for the lock / unlock and start device 11. For that reason. The locking / unlocking and starting device 11 can perform the appropriate authentication based on the internal key information included in the unlock signalPetition 870180139491, of 10/9/2018, p. 108/301

29/114 car or lock sign. Even if a situation occurs in which a third party in bad faith illegally obtains the key unit 12, since the internal key information in the key unit 12, for example, is inaccessible or encrypted, it is possible to reduce the occurrence of theft of the vehicle 10.

[0096] Key ECU 124 also receives a request to unlock and a request to lock from mobile terminals 20 via communication device 123. When authentication of mobile terminal 20 is successful (specifically, after authentication of mobile terminal 20 be successful (specifically, after authentication of the mobile terminal 20 is successful, BLE communication is established continuously) and the key ECU 124 receives a request to unlock or a request to lock from the mobile terminal 20, the Key ECU 124 transmits an unlock signal or lock signal, including the lock / unlock key information, to the lock / unlock and start device 11 via RF radio wave transmitter 122.

[0097] Thus, after an authentication process in the lock / unlock and start device 11, the doors of vehicle 10 are unlocked or locked.

[0098] As described above, the moment the start switch provided in the vehicle cabin 10 is pressed, the key ECU 124 exchanges signals with the lock / unlock device and starts 11 in response to an LF band signal which is transmitted from the lock / unlock and start device 11.

[0099] For example, when the request signal was received from the lock / unlock and start device 11 by the radio wave receiver LF 121, the key ECU 124 transmits a response signal including the internal key information stored in internal memory, or similar, in the direction of the transPetition device 870180139491, of 10/09/2018, pg. 109/301

30/114 car / unlock and start 11 via RF 122 wave radio transmitter.

[00100] For example, when LF radio waves including challenge are received from the lock / unlock and start device 11 by the LF radio wave receiver 121, the key ECU 124 generates a response based on the internal key information, and transmits the response to the locking / unlocking and starting device 11 via the RF radio wave transmitter 122.

[00101] Thus, after the authentication process in the lock / unlock and start 11 device, engine 117 is activated.

[00102] The permission related to the function of locking or unlocking vehicle 10 or starting vehicle 10 can be defined in the authentication key. The permission is designated by the central server 30.

[00103] For example, when the authentication key is allowed to unlock only part of the vehicle 10 doors, the key ECU 124 transmits an unlock signal, including information that designates the ports to be unlocked, to the key unit 12 through the RF radio wave transmitter 122. In this way, as described above, only part of the vehicle doors 10 can be unlocked.

[00104] For example, when the authentication key is not allowed to start engine 117, key ECU 124 only needs to be configured to not exchange signals with the lock / unlock device and start 11 even when a LF band of the locking / unlocking and starting device 11, based on a pressure operation of the starter switch, was received by the radio wave receiver LF 121. Thus, it is possible to prohibit the initiation of the motor 117 according to with permission from the auPetition key 870180139491, of 10/09/2018, p. 110/301

11/31 temptation.

[00105] The GPS 13 module receives GPS signals that are transmitted from three or more, desirably four or more satellites above the vehicle 10, and measures the location of the vehicle 10. The GPS 13 module is communicatively connected to the DCM 14 , or similar, via the vehicle network, such as one-to-one communication and CAN. The measured location information of vehicle 10 is recorded in DCM 14, or similar.

[00106] DCM 14 is a communication device that performs the bidirectional communication with the central server 30 through a predetermined communication network. DCM 14 transmits the vehicle's current location information 10, which is recorded from the GPS module 13 to the central server 30 at the prescribed time delay or in response to a request, or similar, from the central server 30. DCM 14 transmits several parts of vehicle information for central server 30. Examples of various parts of vehicle information include information that the doors of vehicle 10 have been unlocked based on the authentication key or vehicle 10 has been triggered based on the authentication key. The various parts of the vehicle information are acquired via the vehicle network, such as the CAN, at the prescribed timing or in response to a request, or similar, from the central server 30.

[00107] Each of the mobile terminals 20 includes a communication device 21, a communication device 22, a processing device 23, and a touch panel monitor (hereinafter, simply referred to as a monitor) 24.

[00108] Communication device 21 is any device that performs close field communication with vehicle 10 according to the same communication standards as communication device 123. As described above, communication device 21 is,

Petition 870180139491, of 10/09/2018, p. 111/301

32/114 for example, a BLE communication module in the case of the present modality.

[00109] Communication device 22 is any device that performs communication with central server 30, service management servers 40, and the like, through a predetermined communication network. Communication device 22 is, for example, a mobile communication module that conforms to communication standards, such as long-term evolution (LTE), 4a. Generation (4G) and 5th. Generation (5G).

[00110] The processing device 23 performs various control processes on the mobile terminal 20. The functions of the processing device 23 can be implemented by hardware, software, or a combination of hardware and software. The processing device 23 includes, for example, a CPU, a RAM, a ROM, an auxiliary storage device, an RTC, various interfaces for communication and the like. Processing device 23 includes, for example, a communication processing unit 231, a communication processing unit 232, an authentication key acquisition unit 233, an authentication request unit 234, and a lock / unlock and start 235, as functional units that are implemented by running one or more programs stored in the ROM or auxiliary storage device on the CPU. Processing device 23 also includes, for example, a storage unit 230 which is implemented as a storage area in the auxiliary storage device. A process of saving (storing) various data in the storage unit 230 is implemented by a predetermined program stored in the ROM or in the auxiliary storage device.

[00111] The communication processing unit 231 performs

Petition 870180139491, of 10/09/2018, p. 112/301

33/114 in a bidirectional manner the near field communication with the switch unit 12 using the communication device 21, and transmits or receives several signals.

[00112] The communication processing unit 232 establishes the connection to a predetermined communication network using the communication device 22, and transmits or receives various signals, such as data signals and control signals, with the central server 30 , service management servers 40 and the like.

[00113] The authentication key acquisition unit 233, for example, acquires an authentication key from the central server 30 and saves the authentication key acquired in the storage unit 230 in response to a predetermined user operation to a user interface predetermined graphical (GUI) that is displayed on monitor 24. From now on, the description will be made considering that several operations on the mobile terminal 20 are performed by operations on the GUI that is displayed on monitor 24 in sync with the operation of the switch application.

[00114] For example, the authentication key acquisition unit 233 of the mobile terminal 20Aa transmits an authentication key acquisition request to the central server 30 through the communication processing unit 232. Thus, the central server 30 receives the authentication key acquisition request and, when the central server 30 determines that the authentication key acquisition request is a regular authentication key acquisition request, it issues an authentication key. The authentication key acquisition unit 233 acquires the authentication key that is provided from the central server 30 through the communication processing unit 232.

[00115] For example, the authentication key acquisition unit 233 of the mobile terminal 20Aa acquires an authentication key

Petition 870180139491, of 10/09/2018, p. 113/301

34/114 which is provided from central server 30 to mobile terminal 20Ab via communication processing unit 232 in response to a key sharing request (described later) which is transmitted from mobile terminal 20Aa to the server central 30.

[00116] The authentication key acquisition unit 233 of the mobile terminal 20Ab alone can transmit an authentication key acquisition request to the central server 30 through the communication processing unit 232. In this case, when the central server 30 receives the request for the acquisition of the authentication key of the mobile terminal 20Ab, the central server 30 only needs to search the mobile terminal 20Aa of the owner user if it allows the provision of the authentication key.

[00117] For example, the authentication key acquisition unit 233 of the 20Ac mobile terminal transmits an authentication key acquisition request to acquire an authentication key to the delivery management server 50. For example, the acquisition unit mobile key 233 authentication key 20Ad transmits an authentication key acquisition request to acquire an authentication key to the C2C 70 car sharing management server. For example, the terminal 233 authentication key acquisition unit mobile 20B transmits an authentication key acquisition request to acquire an authentication key to the B2C car share management server 80. In this way, each delivery management server 50, car share management server C2C 70, and car sharing management server B2C 80 tr send an authentication key disposition request to the central server 30 in response to the receipt of an authentication key acquisition request, and the

Petition 870180139491, of 10/09/2018, p. 114/301

35/114 central server 30 issues an authentication key in response to receipt of the authentication key disposition request. The authentication key acquisition unit 233 acquires the authentication key that is provided from the central server 30 through the communication processing unit 232.

[00118] The authentication key acquisition unit 233 of each of the 20Ac, 20Ad, 20B mobile terminals can transmit an authentication key acquisition request to the central server 30 through the communication processing unit 232. In this case, central server 30 can determine whether the authentication key acquisition request is a regular authentication key acquisition request by searching for a corresponding server from among the delivery management server 50, the C2C car sharing management server 70, and the B2C 80 car share management server.

[00119] Authentication request unit 234 transmits an authentication request to authenticate mobile terminal 20 to key unit 12 of vehicle 10 through communication processing unit 231. Mobile terminal 20 serves as a remote operational unit for lock or unlock vehicle doors 10. For example, when authentication request unit 234 encounters a key unit corresponding to an authentication key, specifically, when an advertisement packet corresponding to key unit 12 has been received by the communication processing 231, authentication request unit 234 can transmit an authentication request to key unit 12. For example, authentication request unit 234 can transmit an authentication request to key unit 12 in response to predetermined user operation.

Petition 870180139491, of 10/09/2018, p. 115/301

36/114 [00120] The lock / unlock request unit 235 transmits a unlock request including an authentication key or a lock request including an authentication key to key unit 12 via communication processing unit 231 at response to a predetermined user operation. Thus, even when a request to unlock or a request to lock has been transmitted to key unit 12 before an authentication request is transmitted by authentication request unit 234, the doors of vehicle 10 can be locked or unlocked based on in the authentication process on key unit 12. For example, the GUI which is a monitor 24 operation screen may contain an unlock button to issue a request to unlock vehicle 10 and a lock button to issue a request to lock vehicle 10, a request to lock can be transmitted at the touch of the lock button, and the request to unlock can be transmitted at the touch of the unlock button. A request to lock and a request to unlock can be transmitted as a result of an operation to a predetermined hardware operating unit provided on the mobile terminal 20.

[00121] For example, the functions of the authentication key acquisition unit 233, the authentication request unit 234, and / or the lock / unlock request unit 235 can be configured to be available to the user by posting a predetermined application program that is installed in the ROM, auxiliary storage device, or similar, of the processing device 23. Hereinafter, a description will be made considering that the functions of the 233 authentication key acquisition unit, the request unit 234 and the unit to request 235 lock / unlock from processing device 23

Petition 870180139491, of 10/09/2018, p. 116/301

37/114 become available to the user by launching the key application installed on processing device 23 (the auxiliary storage device or ROM).

[00122] The central server 30 includes a communication device 31 and a processing device 32.

[00123] The functions of the central server 30 can be implemented by a plurality of servers in a distributed manner. This also applies to the delivery management server 50, the EC 60 server, the C2C 70 car sharing management server and the B2C 80 car sharing management server.

[00124] Communication device 31 is any device that performs bidirectional communication with each of the vehicles 10, mobile terminals 20 and service management servers 40 through a predetermined communication network.

[00125] The processing device 32 (an example of an information processing device) performs several control processes on the central server 30. The functions of the processing device 32 can be implemented by hardware, software or a combination of hardware and software . The processing device 32 is basically formed from one or a plurality of server computers, each including, for example, a CPU, RAM, ROM, auxiliary storage device, RTC, predetermined communication interface, and the like . This also applies to a processing device 52 (described later) on the delivery management server 50, a processing device 62 (described later) on the EC 60 server, a processing device 72 (described later) on the delivery server. car sharing management C2C 70, and a processing device 82 (described laterPetition 870180139491, 10/9/2018, p. 117/301

38/114 te) of the B2C car sharing management server 80. The processing device 32 includes, for example, a communication processing unit 321, a condition determining unit 322, and a key issuing unit. 323 authentication as functional units that are implemented by running one or more programs saved in ROM or the auxiliary storage device on the CPU. The processing device 32 also includes, for example, a storage unit 320 that is implemented as a storage area defined in the auxiliary storage device of the corresponding server computer, an external storage device that is connected to the corresponding server computer, or others storage devices. A process for saving (storing) various data on the storage unit 320 is implemented by a program stored on the ROM or on the auxiliary storage device. This also applies to storage units 520, 620, 720, 820 (described later).

[00126] The communication processing unit 321 controls the communication device 31 and exchanges various signals, such as control signals and information signals, with each of the vehicles 10, the mobile terminals 20, and the service management servers 40.

[00127] Condition determination unit 322 determines whether an authentication key acquisition request is a regular authentication key acquisition request in response to receipt of the authentication key acquisition request received by the communication processing unit 321, from mobile terminal 20. Condition determination unit 322 also determines whether an authentication key disposition request is a regular authentication key disposition request in

Petition 870180139491, of 10/09/2018, p. 118/301

39/114 response to receiving the authentication key management request from any of the service management servers 40.

[00128] When condition determination unit 322 determines that the authentication key acquisition request is a regular authentication key acquisition request or determines that the authentication key disposition request is a password key disposition request For regular authentication, the authentication key issuing unit 323 (an example of a key information supply unit) identifies the specifications of an authentication key to be issued, and issues an authentication key corresponding to the identified specifications. For example, the authentication key issuing unit 323 identifies the vehicle 10 that is to be locked or unlocked with an authentication key or identifies the key unit 12, or similar, corresponding to the desired vehicle 10. For example, the authentication unit authentication key issuance 323 also identifies the authentication key permission in an effective (available) period of the authentication key and the number of times the authentication key is available. For example, the authentication key issuing unit 323 also identifies the permission of the authentication key to unlock vehicle 10 or start vehicle 10, such as which door can be locked or unlocked and whether vehicle 10 can be started. For example, the authentication key issuing unit 323 can identify the permission of the authentication key on temporary key sharing, such as if the authentication key can be shared with another of the mobile terminals 20 via temporary key sharing (described later), a period during which the authentication key can be shared with another of the mobile terminals 20, and the number of

Petition 870180139491, of 10/09/2018, p. 119/301

40/114 times that the authentication key can be shared with another of the mobile terminals 20. Henceforth, the permission of the authentication key in an available period, the number of times available, and similar, the permission of the authentication key to unlock vehicle 10 or starting vehicle 10, and permission for the authentication key in temporary key sharing are collectively and simply referred to as various types of authentication key permission. The authentication key issuing unit 323 distributes the issued authentication key to the desired mobile terminal 20 through the communication processing unit 321.

Details of the Components Related to the Key Sharing Service [00129] In the following, the components related to the key sharing service in the authentication key management system 1 will be described with reference to figure 3.

[00130] Figure 3 is a block diagram that basically illustrates an example of the components related to the key sharing service in the authentication key management system 1. Hereinafter, for figure 3, the components related to the authentication service. key sharing in the key management system 1 will be basically described, and the overlapping description of the components that overlaps the components described above related to the locking and unlocking of the vehicle 10 and the starting of the vehicle 10 is omitted as much as possible. Henceforth, the same applies to the description in figure 4 to figure 6.

[00131] As described above, the processing device 23 of the mobile terminal 20Aa owned by the user owner of the vehicle 10A includes the communication processing unit 231, the communication processing unit 232, the acquisition unit 870180139491, from 09 / 10/2018, p. 120/301

41/114 authentication key 233, authentication request unit 236, service registration request unit 237, service usage situation request unit 238, and key share request unit 239 as functional units that are implemented by running one or more programs stored in the ROM or auxiliary storage device on the CPU.

[00132] In this modality, the description will be made based on considerations that the functions of the user registration request unit 236, the service registration request unit 237, the service usage situation request unit 238 and key share request unit 239 of mobile terminal 20Aa become available to the owner user when the key application is launched and user authentication based on bidirectional communication with central server 30 is successful. Description will be made considering that user authentication is performed on the central server 30 based on a prescribed ID for the owner user (hereinafter referred to as the owner user ID) and a password corresponding to the owner user ID.

[00133] User registration request unit 236 requests the registration of a regular user of vehicle 10A, which uses various services using vehicle 10A (the key sharing service, the trunk delivery service and the service car sharing system), to central server 30 in response to a predetermined operation by the owner user. For example, user registration request unit 236 transmits a user registration request including the owner user ID, password, and attribute information that identifies a child user to be registered (for example, a name, an age , a relationship with the

Petition 870180139491, of 10/09/2018, p. 121/301

42/114 proprietary user, and the like) to central server 30 through communication processing unit 232.

[00134] When a notification that the child user registration completed (user registration termination notification) is received from the central server 30 by the communication processing unit 232, the user registration request unit 236 saves a user ID child user (hereinafter referred to as a child user ID) and a password, included in the user registration termination notification, on storage unit 230. At that time, user registration request unit 236 can transmit the user ID child user and the password for the mobile terminal 20Ab owned by the child user registered via the communication processing unit 231 in response to a predetermined operation by the owner user.

[00135] Service registration request unit 237 requests registration of the regular user of vehicle 10A with various services using vehicle 10A to central server 30 in response to a predetermined operation by the owner user. That is, as described above, service registration request unit 237 requests registration of key sharing management unit authentication key permission 327 and service management servers 40 corresponding to various services, for the regular user of vehicle 10A to use various services. For example, service registration request unit 237 transmits the proprietary user ID, password, information that identifies the vehicle 10A that is used in various services, information that identifies a desired service, and a service registration request including the regular user ID that uses the desired service (the owner user ID or the child user ID) for the central server 30 through the communication processing unit

Petition 870180139491, of 10/09/2018, p. 122/301

43/114

232. Hereinafter, the owner user ID and the child user ID can be collectively referred to as regular user IDs. In this way, the service registration request unit 237 can register a child user using the car sharing service with the central service 30.

[00136] Service registration request unit 237 receives notification that registration with a service based on the service registration request has been completed from at least one of the central server 30 and the service management servers 40 using the communication processing unit 232. The service registration request unit 237 causes the monitor 24 to display the fact that the regular user registration of vehicle 10A with a specific service based on a predetermined operation of the owner user has been completed. In this way, the owner user is informed about the fact that the registration of the regular user with the specific service has been completed.

[00137] The service usage situation request unit 238 requests information related to the usage situations of the various services, including the key sharing service, with which the regular user of vehicle 10A registers in association with the ID owner user (service usage status information), on the central server 30 in response to a predetermined operation of the owner user. For example, the service utilization request unit 238 transmits a service utilization request including the owner user ID and password to the central server 30 through the communication processing unit 232. When the service utilization situation was received from the central server 30 by the communication processing unit 232, the service utilization situation request unit 238 displays the situation information Petition 870180139491, from 10/09/2018, p. 123/301

44/114 tion of service usage on the monitor 24. In this way, the owner user can fully see the information related to the usage situations of the various services that regular users register on the central server 30 in association with the user ID owner.

[00138] The key sharing request unit 239 requests the distribution of an authentication key to lock or unlock vehicle 10A or start vehicle 10A for the child user registered with the key sharing service, to the central server 30 in response to a predetermined operation by the owner user. For example, the key sharing request unit 239 transmits a key sharing request to the central server 30 through the communication processing unit 232.

[00139] The key sharing request includes the owner user ID and, its password, information related to the 10A vehicle to be locked or unlocked using the authentication key, and information about the intended child user of whom the key is. authentication was provided to or shared with (for example, child user ID). At that time, the key sharing request may include usage period information related to an available period of the authentication key to be provided (for example, a start date and time of use, an end date and time of use, or similar), which is configured by a predetermined operation of the owner user. The key sharing request may also include permission information related to various types of authentication key permissions, which can be assigned in response to a predetermined operation by the owner user. The various types of permission for authentication keys include permission to

Petition 870180139491, of 10/09/2018, p. 124/301

45/114 an authentication key in an available period, the number of times available, or similar, the permission of an authentication key to unlock the vehicle or start the vehicle, the permission of an authentication key or temporary key sharing (described later) and the like. Thus, as will be described later, when the owner user sets up the appropriate permission information in the case in which an authentication key available at the same time is shared among the plurality of mobile terminals 20, the use of vehicle 10A by a user in addition to the owner user is limited. For this reason, it is possible to improve the safety of the 10A vehicle.

[00140] The key sharing request unit 239 may request the provision of authentication keys of which the available periods conflict with each other to the central server 30 in response to a predetermined operation of the owner user while the mobile terminals 20 (that is, each of which is at least one of the mobile terminals 20Aa, 20Ab) of the plurality of regular users of the vehicle 10A are configured for the mobile terminals 20 to which the authentication keys are distributed. That is, the key sharing request, a plurality of regular users to whom authentication keys are distributed, can be assigned, and the plurality of regular users can include the owner user. In the key sharing request, available periods of authentication keys for a plurality of regular users to be assigned may conflict with each other. In this way, a vehicle authentication key 10A available at the same time can be shared among the plurality of regular users. For this reason, for example, when two or more people enter vehicle 10Aa and leave on a trip or go camping, each passenger can, for example, lock or

Petition 870180139491, of 10/09/2018, p. 125/301

46/114 unlock vehicle 10A without borrowing or borrowing mobile terminal 20 in which the authentication key is saved, so that it is possible to improve the convenience of users.

[00141] The key sharing request unit 239 can share the authentication key already provided with another of the mobile terminals 20 (that is, the mobile terminal 20 on which the key application is installed) in response to a predetermined operation of the owner user (hereinafter, a form of authentication key sharing is referred to as temporary key sharing). At that time, another of the mobile terminals 20 may be the mobile terminal 20Ab of the child user or it may be the mobile terminal 20 of a user in addition to the child user, that is, a user who temporarily uses vehicle 10A.

[00142] For example, the key sharing request unit 239 transmits the authentication key (specifically, a copy of the authentication key) to another of the mobile terminals 20 through the communication processing unit 231. Thus, even when two or more people suddenly decide to enter vehicle 10A and leave the trip, or similar, the user who owns vehicle 10A can share the authentication key with another user. Additionally, mobile terminal 20Aa is directly capable of sharing the authentication key available to another of mobile terminals 20 at the same time. For this reason, for example, even when the mobile terminal 20Aa is located in a place of poor communication conditions on a wireless mobile communication network or outside a communication range, the user who owns the 10A vehicle can share the security key. authentication with another user.

[00143] At that time, the 239 key sharing request unit can transmit an authentication key to

Petition 870180139491, of 10/09/2018, p. 126/301

47/114 another of the mobile terminals 20 through the communication processing unit 231, and the authentication key has limited permission over an available period or number of times available or limited permission to unlock vehicle 10A or start vehicle 10A. Each type of permission is configured based on a predetermined operation by the owner user or defined in advance. Specifically, for example, an authentication key with permission that limits an available period to 30 minutes, or similar, or that limits the number of times available to one, or similar, or an authentication key with permission that limits ports to being locked or unlocked on the doors to enter or exit vehicle 10A only or that prohibit vehicle 10A from being switched on can be transmitted to another of the mobile terminals 20 for which the authentication key is provided. Henceforth, this also applies to the case of temporary key sharing that is performed through the central server 30. In this way, it is possible to improve the security of vehicle 10A in the temporary key sharing.

[00144] When temporary key sharing is performed, the key sharing request unit 239 can cause the central server 30 to distribute an authentication key to another of the mobile terminals 20 as in the case of normal key sharing. At that time, the key sharing request unit 239 can cause the central server 30 to provide the vehicle authentication key 10A to another of the mobile terminals 20 by transmitting a temporary key sharing request, including the identifying information the authentication key provided (for example, an issued ID embedded in the authentication key, or the like) and the information designating another of the mobile terminals 20 to be distributed, to the central server 30 through the communication processing unit

Petition 870180139491, of 10/09/2018, p. 127/301

48/114

232.

[00145] For example, when another of the mobile terminals 20 is the child user's mobile terminal 20Ab, the key sharing request unit 239 may transmit a temporary key sharing request including the child user ID to the central server 30 through the communication processing unit 232.

[00146] For example, the key sharing request unit 239 also acquires predetermined identification information (for example, a QR code (trademark) corresponding to the user of another of the mobile terminals 20 which is registered on the central server 30 as a installed user of the key application) from another of the mobile terminals 20 via the communication processing unit 231, or the like. The key sharing request unit 239 can transmit a temporary key sharing request designating another of the mobile terminals 20, which is identified based on the identifying information, as a supply destination for the central server 30.

[00147] The mobile terminal 20Aa can acquire the identification information with another method. For example, the mobile terminal 20Aa can acquire identification information corresponding to the user of another of the mobile terminals 20 by recognizing the identification information that is displayed on the monitor 24 of another of the mobile terminals 20 using an onboard camera function. For example, mobile terminal 20Aa also acquires the identification information transmitted from the user from another of the mobile terminals 20 to an owner user's e-mail address or SNS account.

[00148] For example, the key share request unit 239 also transmits a request for candidate terminal information to central server 30 through the

Petition 870180139491, of 10/09/2018, p. 128/301

49/114 communication processing 232 in response to a predetermined operation from the owner user. The candidate terminal information request serves to request candidate terminal information related to a candidate terminal that is a candidate from another of the mobile terminals 20 and which is located around a current location of the mobile terminal 20Aa. When the candidate terminal information has been received from the central server 30 by the communication processing unit 232, the key sharing request unit 239 also causes the monitor 24 to display the candidate terminal information. At that time, the candidate terminal information that is returned from the central server 30 may include information that identifies a candidate terminal on which a specific operation or action is being performed among the candidate terminals. In this way, the user who owns the vehicle 10A can identify another one of the mobile terminals 20, intended for key sharing, among the candidate terminals that are displayed on the monitor 24 of the mobile terminal 20Aa as the user of another of the mobile terminals 20 performs a specific operation or action on another of the mobile terminals 20. The key sharing request unit 239 can transmit a temporary key sharing request that designates the other of the mobile terminals 20, identified among the candidate terminals, as a supply destination for the central server 30 in response to a predetermined operation of the owner user.

[00149] The key sharing request unit 239 can also transmit link information based on a uniform resource locator (URL) scheme to launch the key application and have another of the mobile terminals 20 acquire a key of central server authentication 30 (hereinafter, simply referred to as link information) to a color address Petition 870180139491, of 10/9/2018, p. 129/301

50/114 e-mail or SNS account of the user of another of the mobile terminals 20 through the communication processing unit 232 in response to a predetermined operation of the owner user. At that time, the key sharing request unit 239 transmits a temporary key sharing request that designates the purchased authentication key to the central server 30 through the communication processing unit 232 in response to a predetermined operation by the owner user, and acquires the link information that is returned from the central server 30 in response to the temporary key sharing request. In this way, the key sharing request unit 239 can provide an authentication key from the central server 30 to another of the mobile terminals 20.

[00150] Temporary key sharing can be configured to be executable from the mobile terminal 20Aa of the child user, to whom the authentication key has already been provided. That is, the functions of the key sharing request unit 239, related to temporary key sharing, may be included in the functions of the key application that is installed on the processing device 23 of the child user's 20Ab mobile terminal. Thus, even in the case where two or more people except the owner user enter the vehicle 10A, it is not necessary to borrow or borrow the mobile terminal 20Ab of the child user who has already acquired the authentication key between the two or more people, so that it is possible to further improve the convenience of the child user of the 10A vehicle. From now on, the description will be made considering that the temporary key sharing is available from the child user's 20Ab mobile terminal.

[00151] As described above, the processing device 32

Petition 870180139491, of 10/09/2018, p. 130/301

51/114 of central server 30 includes communication processing unit 321, condition determining unit 322, authentication key issuing unit 323, and storage unit 320. Central device 30 processing device 30 it also includes a location information management unit 324, a programming management unit 325, a record management unit 326 and the key sharing management unit 327.

[00152] When the communication processing unit 321 receives a request to acquire an authentication key from any of the mobile terminals 20Aa, 20Ab, the condition determination unit 322 performs authentication based on the regular user ID and password included in the authentication key acquisition request. For example, condition determination unit 322 compares the regular user ID and password registered on storage unit 320 with the regular user ID and password included in the authentication key acquisition request. When the registered regular user ID and password match the regular user ID and password included in the authentication key acquisition request, that is, the authentication key acquisition request is an authentication key acquisition request regular.

[00153] Condition determination unit 322 also determines whether an authentication key disposition request, which is transferred from key sharing management unit 327 (described later) is a regular authentication key disposition request . For example, when authentication is successful based on the authentication information (for example, ID and password) included in the authentication key disposition request from competition management unit 870180139491, of 10/9/2018, p. 131/301

52/114 key sharing 327, condition determination unit 322 may determine that the authentication key disposition request is an authentication key disposition request. [00154] When condition determination unit 322 determines that the authentication key acquisition request is a regular authentication key acquisition request or the authentication key disposition request is an authentication key disposition request, the authentication key issuing unit 323 issues an authentication key and distributes the authentication key to the desired mobile terminal 20 through the communication processing unit 321.

[00155] Location information management unit 324 acquires location information from vehicle 10A via communication processing unit 321, and monitors vehicle 10A's travel situation by monitoring vehicle location information 10A in time real. In this way, for example, the location information management unit 324 can inform the owner user about the location information of the vehicle 10A that the child user has borrowed through the communication processing unit 321. For example, the management unit location information 324 can inform the child user's mobile terminal 20Ab of the information, such as whether vehicle 10A programmed to be loaned to the child user is heading towards a designated location (home, or similar) and how long it takes to reach the destination via the 321 communication processing unit.

[00156] The programming management unit 325 manages the situations of use of vehicle 10A in various services. For example, the programming management unit 325 periodically purchases a vehicle usage schedule 10A in serPetição 870180139491, from 10/09/2018, pg. 132/301

53/114 key-sharing service, specifically, information related to an available date and time of the authentication key that is provided by the key-sharing service, from the 327 key-sharing management unit. scheduling 325 also acquires a 10A vehicle usage schedule for each of the trunk delivery services and the C2C car sharing service from the distribution management server 50 and the car sharing management server C2C 70 through communication processing unit 321. Programming management unit 325 generates information related to vehicle usage schedule 10A through a plurality of services (vehicle usage schedule information) based on usage schedule acquired from the 10A vehicle in various services, and lists the old vehicle usage programming information saved in storage unit 320. That is, the programming management unit 325 (an example of a coordination unit) prevents a conflict of a vehicle usage schedule 10A between a plurality services, a plurality of commercial operators providing various services, and a plurality of regular users of vehicle 10A, as will be described later, by sequentially updating vehicle usage programming information.

[00157] The registration management unit 326 registers the regular user (child user) who uses various services in response to a user registration request that is received from the mobile terminal 20a of the owner user by the communication processing unit 321. For For example, record management unit 326 compares the owner user ID and password included in the user registration request from the mobile terminal 20Aa with the user ID

Petition 870180139491, of 10/09/2018, p. 133/301

54/114 owner user and password saved on storage unit 320. When the owner user ID and password included in the user registration request match the saved owner user ID and password, the record management unit 326 determines that the user registration request is a regular user registration request, that is, authentication was successful. Registration management unit 326 registers the child user ID included in the regular user registration request in a user and service registration information (DB) database on storage unit 320 as a regular user who can use several services.

[00158] The registration management unit 326 performs the registration of the regular user of the vehicle 10A with various services in response to a service registration request that is received from the mobile terminal 20Aa of the owner user by the communication processing unit 321. This that is, record management unit 326 records the authentication key disposition permission of key share management unit 327 and service management servers 40 corresponding to various services in response to the service registration request. The authentication key disposition permission is the permission for the user of vehicle 10A to use the various services. For example, record management unit 326 determines whether the service registration request is a regular service registration request by performing an authentication process similar to the process described above based on the owner user ID and password included in the request service record of the mobile terminal 20Aa. When the service registration request is a regular service registration request, the registry management unit 326 also determines whether the regular user ID included in the registration service request 870180139491, of 10/9/2018, p. 134/301

55/114 service has already been registered in the user and service registration information DB. When the regular user ID included in the service registration request has already been registered in the user and service registration information DB, registration management unit 326 registers an intended service, which is identified by the service registration request, in DB of user and service registration information on storage unit 320 as a service available to the regular user corresponding to the regular user ID.

[00159] Specifically, record management unit 326 builds the user and service record information DB that associates the unique service information, the unique vehicle information, the regular user ID, and the service link information with the owner user ID. The service unit information identifies a desired service. The unique vehicle information identifies the vehicle 10A. The regular user ID identifies the regular user who uses a service. The service link information associated with the singular vehicle information and the regular user ID, corresponding to the vehicle 10A, with the desired service.

[00160] The singular service information is, for example, a service ID that is defined for each service. Specifically, for example, when there are a plurality of commercial operators that provide the C2C car sharing service, a unique service ID is defined for each of the commercial operators. For example, when the same commercial operator provides a plurality of C2C car sharing services, a unique ID is provided for each of the services that the same commercial operator provides. When the trunk delivery service is provided by a combination of a plurality of delivery service providers and a plurality of EC commercial operators, a unique service ID can be defined for each combination of a provider

Petition 870180139491, of 10/09/2018, p. 135/301

56/114 delivery service and an EC commercial operator, or a desired service can be identified by a combination of a unique service ID that is defined for each of a plurality of delivery service providers and a unique service ID which is defined for each of the plurality of EC commercial operators.

[00161] The singular vehicle information can be any information as long as the singular vehicle information can identify the vehicle 10Aa to be locked or unlocked or to be connected with an authentication key. The unique vehicle information can be, for example, identification information, such as a vehicle ID and a VIN, which is defined for each vehicle 10A. The unique vehicle information can be, for example, the identification information, such as a key unit ID, which is defined for each device embedded in the vehicle, such as the key unit 12, which is related to locking or unlocking the doors or starting the vehicle 10A based on an authentication key and which is mounted on the vehicle 10A. From now on, the description will be made considering that the singular vehicle information is a key unit ID.

[00162] The service link information is the information needed to make the authentication key issuing unit 323 issue an authentication key and provide the authentication key to the desired mobile terminal 20, as any one among the key share management unit 327, the distribution management server 50 and the EC server 60 and the car share management server 70, which manage, respectively, the various services transmits a key disposition request. authentication. That is, the authentication key issuing unit 323 can identify the vehicle 10A to be locked or unlocked or to be connected with an authentication key 870180139491, of 10/9/2018, p. 136/301

57/114 and issue an appropriate authentication key upon receipt of an authentication key disposition request including service link information from any of the 327 key-sharing management unit, the management server distribution 50 and the EC 60 server, and the C2C 70 car sharing management server.

[00163] The service link information can be any information as long as the service link information can associate a desired service with the vehicle 10A and a user using the service on the central server 30. Examples of the service link information can include a login ID of a regular user at each of the user-oriented network sites for various services corresponding to the key sharing management unit 327, the distribution management server 50, the EC 60 server, and the C2C 70 car share management (hereinafter referred to as the service login ID for convenience). In this case, the service registration request unit 237 of the mobile terminal 20Aa transmits a service registration request including the service login IDs of a regular user to be registered, corresponding to various services, to the central server 30 through the communication processing unit 232. When a regular user to be registered has not acquired service login IDs corresponding to various services yet, the processing device 23 of the mobile terminal 20Aa can launch a predetermined browser and cause the regular user to acquire IDs service login page for the various services. Thus, when a user (a regular user of vehicle 10A) connects to a network site at the time of requesting a desired service, the distribution management server 50 or the C2C 70 car sharing management server can find an ID

Petition 870180139491, of 10/09/2018, p. 137/301

58/114 service login corresponding to the service link information and easily have an authentication key related to the provision of the service. Henceforth, the description will be made considering that the service link information related to the trunk delivery service and the C2C car sharing service is the service login ID described above.

[00164] In the case of a regular user who regularly uses the plurality of vehicles 10A, the central server 30 can identify the regular user, but cannot identify vehicle 10A with only the service login ID. For this reason, the service link information includes not only a service login ID, but also information to indirectly identify the vehicle 10A (for example, information obtained by encrypting the vehicle's unique information in a predetermined way, or similar ).

[00165] When registration management unit 326 completes registration with various services, registration management unit 326 provides notification of completion to mobile terminal 20Aa or mobile terminal 20Ab, corresponding to a regular user to be registered , through communication processing unit 321. When record management unit 326 completes registration with various services, record management unit 326 also provides a service registration termination notification including service link information for any of the key share management unit 327 and service management servers 40, which manage registered service operations.

[00166] A notification of termination of registration with various services to the mobile terminal 20Aa or mobile terminal 20Ab can be transmitted from any of the service management servers 40, which has received a notification of termination of

Petition 870180139491, of 10/09/2018, p. 138/301

59/114 service record.

[00167] When the communication processing unit 321 receives a service usage status request from the mobile terminal 20Aa, the record management unit 326 generates the service usage status information based on the DB registration information DB. user and service of the storage unit 520, the vehicle usage programming information that is managed by the programming management unit 325, and the like, and distributes the service usage status information to the mobile terminal 20Aa through the storage unit 321 communication processing.

[00168] The key sharing management unit 327 manages the operations of the key sharing service.

[00169] For example, key sharing management unit 327 provides an authentication key for mobile terminal 20Aa or mobile terminal 20Ab corresponding to the regular user ID that is designated by a key sharing request in response to the request key sharing unit that is received from the owner user's mobile terminal 20Aa by the communication processing unit 321. Specifically, the key sharing management unit 327 compares the owner user ID and password included in the key sharing request with the owner user ID and password saved on storage unit 320. When the owner user ID and password included in the key sharing request match the owner user ID and password, the key sharing management unit 327 determines that the key sharing request is a regular key sharing request. The key sharing management unit 327 also searches for the gePetition unit 870180139491, of 10/09/2018, pg. 139/301

60/114 scheduling referencing 325, and determines whether there is any inconsistency between the usage period information included in the key sharing request and the latest vehicle usage scheduling information, that is, whether there is a date and time conflict with respect to the use of vehicle 10A between a plurality of services, a plurality of commercial operators providing services, and a plurality of regular users. When there is no date and time conflict, the key sharing management unit 327 transfers an authentication key disposition request to the authentication key issuing unit 323. The authentication key disposition request includes related information with a regular user and vehicle 10A, and permission information, which is identified from the information included in the key sharing request. The regular user corresponds to mobile terminal 20Aa or mobile terminal 20Ab, which is a destination for distributing an authentication key. Vehicle 10A must be locked or unlocked or connected with the authentication key. Permission information includes information about an available period of the desired mobile terminal 20Aa or mobile terminal 20Ab, the number of times the desired mobile terminal 20Aa or mobile terminal 20Ab is available, unlockable ports of the desired mobile terminal 20Aa or mobile terminal 20Ab , if the desired mobile terminal 20Aa or terminal 20Ab can start the vehicle 10A, and the like. In this way, the authentication key issuing unit 232 can identify the regular user ID corresponding to the mobile terminal 20Aa or mobile terminal 20Ab, which is a delivery destination for an authentication key, and the vehicle 10A to be locked or unlocked or linked with an authentication key, and issue an appropriate authentication key.

[00170] The chaPetition sharing management unit 870180139491, of 10/09/2018, p. 140/301

61/114 ve 327 also checks, for example, the attribute information (for example, age, if the user has a driver's license, and the like) of the user of the mobile terminal 20Aa or the mobile terminal 20Ab, which is a destination delivery of an authentication key and that is designated by the key sharing request. Attribute information is stored in storage unit 320. When the user of the mobile terminal 20Aa or mobile terminal 20Ab, which is a delivery destination for an authentication key (the regular user of vehicle 10A) is a user that is determined as it is unable to drive vehicle 10A, the key sharing management unit 327 issues an authentication key, with permission that does not allow the user to start vehicle 10A, to the user's mobile terminal 20. Examples of the user who cannot drive the 10A vehicle include a user who has not reached the minimum age for driving, and a user who does not have a driver's license. Specifically, the key sharing management unit 327 transfers an authentication key disposition request to the authentication key issuing unit 323, and the authentication key disposition request includes the permission information corresponding to the mobile terminal. 20Aa or mobile terminal 20Ab, corresponding to the user considered unable to drive the vehicle 10A, and which includes an instruction to prohibit the vehicle 10A from being started. In this way, since the authentication key issuing unit 323 can distribute an authentication key with permission to prohibit vehicle 10A from starting, to mobile terminal 20Aa or mobile terminal 20Ab of the user who cannot drive vehicle 10A , it is possible to improve the security of the 10A vehicle in the key sharing service.

[00171] For example, key share management unit 327 distributes vehicle 101A authentication key

Petition 870180139491, of 10/09/2018, p. 141/301

62/114 to another of the mobile terminals 20, designated by the temporary key sharing request, based on the temporary key sharing request that is received from the owner user's mobile terminal 20Aa by the communication processing unit 321. Specifically, the unit key management tool 327 identifies an installed user ID (hereinafter referred to as installed user ID) corresponding to another of the mobile terminals 20, which is a delivery destination, based on the application's installed user information DB key, stored on storage unit 320. Key sharing management unit 327 transfers the authentication key disposition request including the installed and identified user ID and information corresponding to the authentication key designated by the sharing request. temporary key (for example, an I D issued the authentication key included in the temporary key sharing request, or similar) to the authentication key issuing unit 323. In this way, the authentication key issuing unit 323 is able to identify another of the mobile terminals 20 , which is a delivery destination, based on the installed user ID, ID issued from the authentication key, and the like, and providing the authentication key to another of the mobile terminals 20 through the communication processing unit 321.

[00172] The functions of the key sharing management unit 327 can be transferred to a server outside the central server 30 (key sharing management server), in addition to other services using vehicle 10A. The key sharing management server can be added to the service management servers 40.

[00173] As described above, the mobile terminal 20Ab owned by Petition 870180139491, of 10/09/2018, p. 142/301

63/114 of the child user includes the communication processing unit 231, the communication processing unit 232, the authentication key acquisition unit 233, the authentication request unit 234, the lock / unlock request unit 235 and storage unit 230.

[00174] In the present modality, the description will be made considering that the function of the 233 authentication key acquisition unit of the 20Ab mobile terminal becomes available to the child user as the key application is launched and the authentication of the user based on bidirectional communication with the central server 30 is successful. The description will be made assuming that user authentication is performed on the central server 30 based on the child user ID and password. The description will be made considering that the functions of the authentication request unit 234, the lock / unlock request unit 235 and the like, of the mobile terminal 20Ab become available to the child user as the key application is launched .

[00175] As described above, the authentication key acquisition unit 233 requires an authentication key that is distributed from the central server 30 in response to a key sharing request that is transmitted from the mobile terminal 20Aa, to the central server 30, through the communication processing unit 232. In this way, the mobile terminal 20Ab can lock or unlock the doors of the vehicle 10A and start the vehicle 10A based on the functions of the communication processing unit 231, authentication request 234 and lock / unlock request unit 235. That is, with the key-sharing service, the child user who owns the 20Ab mobile terminal can directly use vehicle 10A, for example, lock or unlock vehicle 10A or start vehicle 10, using the mobile terminal 870180139491, from 10/09/2018, p. 143/301

64/114 speed 20Ab without providing a key to or from the owner user. Similarly, the owner user can lend vehicle 10A to the child user without providing a key to or from the child user. For this reason, it is possible to improve the convenience of borrowing or borrowing vehicle 10A between the owner user and the child user of vehicle 10A with the key sharing service in the authentication key management system 1.

[00176] As described above, the authentication key acquisition unit 233 acquires an authentication key that is provided from the central server 30 in response to a temporary key sharing request that is transmitted from the mobile terminal 20Aa to the central server 30 via the communication processing unit 232. This also applies to the case where an authentication key is provided to the mobile terminal 20 in addition to the child user's mobile terminal 20Ab in response to a temporary key sharing request . In this way, the other mobile terminals 20 including the mobile terminal 20Ab can lock or unlock the doors of the vehicle 10A and start the vehicle 10A based on the functions of the communication processing unit 231, authentication request unit 234 and request unit to lock / unlock 235. This is, for example, when two or more people, including another regular user, enter vehicle 10A and leave, and even when the child user who owns the 20Ab mobile terminal has not acquired an authentication key in advance, the child user does not need to borrow the mobile terminal 20Aa or mobile terminal 20Ab to which the authentication key has been provided and can directly use vehicle 10A, for example, lock or unlock vehicle 10A or drive vehicle 10A, using of the mobile terminal 20Ab. Similarly, even when the user proposes 870180139491, of 10/9/2018, p. 144/301

65/114 owner did not cause the child user's 20Ab mobile terminal to acquire an authentication key in advance, the owner user does not need to lend his own mobile terminal 20Aa to the child user. For this reason, it is possible to improve the convenience of users in the case where two or more people including a regular user of vehicle 10A enter vehicle 10A and use vehicle 10A with temporary key sharing in the authentication key management system 1 .

Details of the Components Related to the Delivery Service for Trunk [00177] Next, the components related to the delivery service for trunk in the authentication key management system 1 will be described with reference to figure 4.

[00178] Figure 4 is a block diagram that basically illustrates an example of components related to the delivery service for trunk in the authentication key management system 1. From now on, for figure 4, the components related to the delivery service for trunk in the authentication key management system 1 will be described basically, and the overlapping description of the components that overlap with the components related to the key sharing service described above is omitted as much as possible.

[00179] As described above, the processing device 23 of the mobile terminal 20Aa owned by the user who owns the vehicle 10A includes the communication processing unit 232, the user registration request unit 236, the registration request unit service 237, and the service usage request unit 238.

[00180] As described above, the user registration request unit 236 requests the registration of the regular user (child user)

Petition 870180139491, of 10/09/2018, p. 145/301

66/114 of vehicle 10A, which uses various services including trunk delivery service, to central server 30 in response to a predetermined operation by the owner user.

[00181] As described above, the service registration request unit 237 requests the registration of each registered regular user (the owner user and the child user) with various services including the trunk delivery service to the central server 30 in response to a predetermined operation by the owner user.

[00182] For example, service registration request unit 237 transmits a service registration request to use the trunk delivery service to the central server 30. The service registration request includes a login ID of service of a web site for users using the delivery management server service 50 (hereinafter referred to as a delivery site) and a service login ID for an EC site as service link information. The service login IDs correspond to the regular user of vehicle 10A, which must be registered.

[00183] As described above, the service usage situation request unit 238 requests information related to the usage situations of various services, including the delivery service to the trunk, by regular users of vehicle 10A, which were registered in association with the proprietary user ID (service usage status information), for the central server 30 in response to a predetermined operation of the proprietary user.

[00184] The delivery management server 50 includes a communication device 51 and the processing device 52.

[00185] Communication device 51 is any device that performs bidirectional communication with each of the mobile terminals 20, the central server 30 and the EC server 60 through a predetermined communication network.

Petition 870180139491, of 10/09/2018, p. 146/301

67/114 [00186] Processing device 52 includes, for example, a communication processing unit 521, a service cooperation registration unit 522, a delivery acceptance unit 523, and a delivery management unit 524 as functional units that are implemented by running one or more programs stored in the ROM or auxiliary storage device on the CPU. The processing device 52 also includes a storage unit 520 which is implemented as a storage area, such as the auxiliary storage device of the server computer.

[00187] Communication processing unit 521 controls communication device 51, and exchanges various signals, such as control signals and information signals, with each of the mobile terminals 20, the central server 30 and the EC server 60 .

[00188] The service cooperation registration unit 522 records information for the cooperation between the central server 30 and the delivery management server 50, related to the use of the trunk delivery service by the regular users of the vehicle 10A, in response to a service registration termination notification that is received from the central server 30 by the communication processing unit 521.

[00189] For example, service cooperation registration unit 522 adds an indicator to a service login ID (service link information) included in a service registration termination notification in a user management DB for user management at the delivery site built on storage unit 520. The indicator indicates that the user corresponding to the service login ID is a user of the trunk delivery service. At the same time, the service cooperation registration unit 522 registers the service login ID included in notice 870180139491, of 10/9/2018, p. 147/301

68/114 termination of service registration in the user management DB of storage unit 520 in association with a service login ID of the network site corresponding to the EC 60 server (ie, EC site). The service login ID of the EC site is included in the service registration termination notification. Thus, when an order including a service login ID is received from the EC server 60 by the communication processing unit 521, the delivery management server 50 can identify the corresponding service login ID from the delivery site. The delivery management server 50 can have the central server 30 provide an authentication key to a delivery terminal 20Ac mobile terminal, as will be described later, by transmitting an authentication key disposition request including the login ID identified for the central server 30.

[00190] Delivery acceptance unit 523 receives information related to a request to deliver a package (delivery request information), including the service login ID of the EC site, from the EC 60 server through the unit communication processing 521. The service login ID corresponds to an order for a product on the EC website. The delivery request information that is received from the EC 60 server includes not only basic information, such as a name, address and phone number for an order from a delivery address, but also information related to a designated delivery address ( delivery address information), information related to a designated delivery date and time (delivery date and time information) and the like.

[00191] The delivery management unit 524 manages the operations of the processes from receipt to delivery, related to a delivery request received by the delivery acceptance unit 523.

Petition 870180139491, of 10/09/2018, p. 148/301

69/114 [00192] For example, as the distribution management unit 524 receives notification that a package has arrived at a sales office that is in charge of a parking space for vehicle 10A designated by the address information of delivery of a delivery request, delivery management unit 524 determines a departure date and time for delivery of the package, a delivery person in charge, and the like, according to the designated delivery time period.

[00193] Subsequently, the delivery management unit 524 performs a search on the location information of the vehicle 10A to the central server 30 through the communication processing unit 521 before the package leaves (for example, 10 minutes before the time) programmed output). At that time, the survey includes a service login ID (that is, service link information) for the regular user of vehicle 10A at the delivery site. The regular user of vehicle 10A is a user of the trunk delivery service. This also applies to a search for location information (described later). The delivery management unit 524 acquires the vehicle's current location information 10A from the central server 30 through the communication processing unit 521, and determines whether delivery is possible based on the combination with the designated parking location, a relationship with a responsible area and the like.

[00194] Subsequently, when the delivery management unit 524 determines that the package can be delivered, the delivery management unit 524 transmits a notification that the package can be delivered in the trunk of the vehicle 10A (delivery notification), to the mobile terminal 20Ac of a delivery person via the communication processing unit 521.

[00195] Subsequently, as the processing unit Petition 870180139491, of 10/09/2018, p. 149/301

70/114 communication device 521 receives an authentication key acquisition request from the 20Ac mobile terminal that received the delivery notification, the delivery management unit 524 determines whether the authentication key acquisition request is an acquisition request regular authentication key. Specifically, the delivery management unit 524 can perform the determination by comparing the information related to a package to be delivered (hereinafter, information about the delivery item for convenience purposes) with various pieces of information related to the package, recorded in the storage unit 520. Delivery item information includes, for example, a delivery person, a delivery address (for example, a name or legal name of a recipient, or similar), the type of package, a period of delivery, and a delivery location, which may be included in the authentication key acquisition request. As the delivery management unit 524 determines that the authentication key acquisition request is a regular authentication key acquisition request, the delivery management unit 524 transmits an authentication key disposition request to the server central 30 through the communication processing unit 521. At that time, the request for disposition of the authentication key includes the information to identify the mobile terminal 20Ac of the delivery person. The information to identify a delivery person can be, for example, an authentication ID for a delivery person to obtain user authentication at the central server 30 in order to use the functions of the key application, corresponding to the authentication key acquisition unit. 233, and the like, of the 20Ac mobile terminal (hereinafter referred to as the delivery ID for convenience). In this way, the delivery terminal's 20Ac mobile terminal is able to acquire an authentication key from the central server 30.

Petition 870180139491, of 10/09/2018, p. 150/301

71/114 [00196] Subsequently, as delivery management unit 524 receives a search for vehicle 10A's current location information from the delivery man's 20Ac mobile terminal, which has left for the delivery of a sales office, through the communication processing unit 521, the delivery management unit 524 performs a search on the current location information of the vehicle 10A to the central server 30. The delivery management unit 524 acquires the current location information of the vehicle 10A from the central server 30 through the communication processing unit 521, and transmits (sends) the current location information of the vehicle 10A to the mobile terminal 20Ac of the delivery person. In this way, the delivery driver on the way can compare the current location information of the vehicle 10A with the information related to the location in the parking lot of the vehicle 10A, designated by the delivery address information, and determine whether to deliver the package or bring the package back .

[00197] Finally, as the distribution management unit 524 receives an end of delivery notification, which is received from the mobile terminal 20Ac of the delivery person who has just delivered the package, through the communication processing unit 521 , the delivery management unit 524 basically ends the management of operations related to the delivery service to the trunk for the package. At that time, the delivery management unit 524 can provide an end-of-delivery notification to the regular user of vehicle 10A, who is a customer (a buyer of a product on the EC website) via an email or a predetermined application that runs in cooperation with the delivery site that is installed on the mobile terminal 20Aa or on the mobile terminal 20Ab.

[00198] As described above, when a door (door coverPetition 870180139491, of 10/9/2018, page 151/301

72/114 suitcases, or similar) to access the trunk of vehicle 10A is unlocked and then locked, DCM 14 of vehicle 10A can determine that the delivery person has finished delivery, and can provide a final delivery notification to the central server 30. Thus, when the central server 30 receives the notification, the central server 30 can transmit a final delivery notification to the delivery management server 50. That is, the final delivery notification can be transmitted from the central server 30 to delivery management server 50.

[00199] The EC server 60 includes a communication device 61 and the processing device 62.

[00200] Communication device 61 is any device that performs bidirectional communication with each of the mobile terminals 20, the central server 30 and the delivery management server 50 through a predetermined communication network.

[00201] Processing device 52 includes, for example, a communication processing unit 621, a network resource transmission unit 622, a service cooperation registration unit 623, and an order receipt processing unit 624 as functional units that are implemented by running one or more programs stored in the ROM or auxiliary storage device on the CPU. Processing device 62 also includes storage unit 620 which is implemented as a storage area, such as the auxiliary storage device of the server computer.

[00202] The communication processing unit 621 controls the communication device 61, and exchanges the various signals, such as control signals and information signals, with each of the mobile terminals 20, the central server 30 and the management server delivery 50.

Petition 870180139491, of 10/09/2018, p. 152/301

73/114 [00203] The network resource transmission unit 622 transmits resources to a browser from any of the terminals in a predetermined manner based on various pieces of information. The resources correspond to web pages to be displayed in a browser from any of the user terminals that browse the EC site. The various pieces of information are resources of the EC site, and are saved in storage unit 620. User terminals include mobile terminals 20Aa, 20Ab. The network pages that can be displayed on the EC site include a top page on the EC site, network pages corresponding to individual items that are ported on the EC site, an order record page on which a user records various parts of the information at the moment to order individual items, and the like. For example, the 622 network resource transmission unit transmits hypertext markup language (HTML) documents corresponding to the network pages and information under the HTML documents, such as images and moving images, to be displayed on the network pages , in parallel with each other.

[00204] The service cooperation registration unit 623 records the information for cooperation between the central server 30 and the EC 60 server, related to the use of the trunk delivery service by the regular users of the vehicle 10A, in response to a service registration termination notification that is received from central server 30 by communication processing unit 621. For example, service cooperation registration unit 623 adds an indicator to a service login ID included in the termination notification of service registration in the user management DB for user management on the EC site built on storage unit 620. The indicator indicates that the user corresponding to the service login ID is a user of the enPetition service 870180139491, from 09 / 10/2018, p. 153/301

74/114 delivery to the trunk. At the same time, the service cooperation registration unit 623 registers the service login ID included in the service registration termination notification in the user management DB in association with a network site service login ID (this ie, delivery site) corresponding to delivery management server 50. The service login ID for the delivery site is included in the service registration checkout notification. Thus, for example, when the communication processing unit 621 receives a search, or similar, about a requested item, including the service login ID of the delivery site, from the delivery management server 50, the server EC 60 can identify the corresponding service login ID from the EC site.

[00205] The order receipt processing unit 624 receives an order for a product from a user based on various input operations, corresponding to the user's product order on the EC website. At this point, when the trunk of vehicle 10A is selected as a delivery address on an order record page on the EC website, order processing unit 624 does a search for vehicle usage programming information to central server 30 via communication processing unit 621. In this way, order processing processing unit 624 can acquire the latest vehicle usage programming information via communication processing unit 621, so for example , when a designated delivery date and time already conflict with another schedule, the order receipt processing unit 624 can take action, such as requesting a change to a delivery date and time. That is, the scheduling management unit 325 on the central server 30 can prevent a user from selecting the dates and times on which a first

Petition 870180139491, of 10/09/2018, p. 154/301

75/114 commercial operator is scheduled to use a service (for example, trunk delivery service) at the time of allowing the user to select a delivery date and time for the trunk delivery service by the second operator on the EC website for sequentially updating the latest vehicle usage programming information. At that time, the content of a link from a programmable network application interface (API) corresponding to vehicle usage programming information can be displayed on the EC website. In this way, a user can designate a time period without a conflict with another service based on the vehicle usage schedule information as a delivery date and time, and, since the vehicle usage schedule information is displayed on the EC site through WebAPI, vehicle usage programming information is not transmitted to the EC site, so that it is desirable from the point of view of protecting the privacy of a regular user of the 10A vehicle.

[00206] As described above, a delivery service for trunk for items in addition to the products requested on the EC website, is also conceivable. In this case, similarly, the delivery management server 50 only needs to acquire the latest vehicle usage programming information from the central server 30. Thus, when a package delivery date and time for the trunk of the vehicle 10A designated by a regular user of vehicle 10A conflict with another schedule, the delivery management server 50 may perform an action, such as requesting a change of delivery date and time.

[00207] As described above, processing device 32 of central server 30 includes communication processing unit 321, condition determining unit 322, authentication key issuing unit 323, management unit

Petition 870180139491, of 10/09/2018, p. 155/301

76/114 of location information 324, the programming management unit 325, the record management unit 326, an authentication key usage coordination unit 328 and the storage unit 320.

[00208] When condition determination unit 322 receives an authentication key disposition request from delivery management server 50 through communication processing unit 321, condition determination unit 322 determines whether the disposition request for authentication key is a regular authentication key disposition request. For example, condition determination unit 322 determines whether the authentication key disposition request is a regular authentication key disposition request based on the service login ID of the delivery site, included in the key disposition request. authentication information, and the predetermined authentication information (for example, an ID and password or the like) corresponding to the distribution management server 50.

[00209] When condition determination unit 322 determines that the authentication key disposition request is a regular authentication key disposition request, the authentication key issuing unit 323 identifies vehicle 10A corresponding to the disposition request of authentication key based on the service unit information DB of storage unit 320. The authentication key issuing unit 323 issues an authentication key with limited permission that limits the number of times the authentication key will be available (for example, the number of times the authentication key will be available is one) and that only allows the trunk lid to be locked or unlocked for a limited period of time (for example, usable for only a hardPetition 870180139491, of 10/9/2018, page 156/301

77/114 tion of time from several minutes to several tens of minutes from the delivery of the authentication key). In this way, it is possible to prevent a delivery person from using vehicle 10A without permission and to improve safety. The authentication key issuing unit

323 provides an authentication key for a delivery person's 20Ac mobile terminal through communication processing unit 321. The delivery person is identified by the authentication key disposition request.

[00210] For example, any method, such as a known mathematical method is a method using bidirectional communication between the central server 30 and the vehicle 10, can be employed as a method of limiting the available period of an authentication key, the number of times an authentication key is available, or similar.

[00211] The location information management unit

324 transmits a request for location information to vehicle 10A through communication processing unit 321 in response to a search for the current location of vehicle 10A from the delivery management server 50. The search is received by the processing unit of communication 321. Thus, DCM 14 of the vehicle 10A returns the location information of the vehicle 10A, which is recorded from the GPS module 13, to the central server 30 in response to the request for location information from the central server 30 The location information management unit 324 can acquire the current location information of the vehicle 10A via the communication processing unit 321. The location information management unit 324 returns the current location information acquired from the vehicle 10A to the delivery management server 50 through the un communication processing age 321.

Petition 870180139491, of 10/09/2018, p. 157/301

78/114 [00212] Programming management unit 325 returns the last vehicle usage programming information saved in storage unit 320 to server EC 60 via communication processing unit 321 in response to a search from the EC 60 server. The poll is received by the 321 communication processing unit.

[00213] As described above, record management unit 326 registers a regular user (child user) who uses various services, including the trunk delivery service, in response to a user registration request that is received from the mobile terminal 20Aa of the owner user by the communication processing unit 321. As described above, registration management unit 326 also registers the regular user of vehicle 10A with the trunk delivery service in response to a registration request. service, which is received from the owner user's mobile terminal 20Aa, by the communication processing unit 321. As described above, when record management unit 326 completes registration with various services, including trunk delivery service, record management unit 326 also provides notification of completion of registration to the mobile terminal speed 20Aa or mobile terminal 20Ab, corresponding to the regular user to be registered, through the communication processing unit 321. When the registration management unit 326 completes the registration with the trunk delivery service, the management unit registration 326 transmits a service registration termination notification including service link information to the delivery management server 50 and the EC 60 server that manage the service operations to be registered through the communication processing unit 321 The key usage coordination unit

Petition 870180139491, of 10/09/2018, p. 158/301

79/114 authentication 328 (an example of a coordination unit) performs coordination to prevent the simultaneous use of an authentication key that can be provided for mobile terminals 20 (mobile terminals 20Ac, 20Ad) through a plurality of service providers. For example, when a plurality of delivery service providers each provide a delivery service for trunk, it is assumed that the delivery service providers go out to deliver packages in a near period of time. For example, it is assumed that a renter who has a reservation to rent the 10A vehicle through the C2C car sharing service, shortly after a period of time, during which a delivery service provider, who provides a delivery service for trunk, deliver a package. In such cases, when the mobile terminal 20, corresponding to the first commercial operator, uses an authentication key, the authentication key usage coordination unit 328 coordinates, so that the mobile terminal 20 corresponding to the second commercial operator does not use the authentication key. Details will be described later (see figures 7 to 10).

[00214] As described above, the processing device 23 of the mobile terminal 20Ac of a delivery person includes the communication processing unit 231, the communication processing unit 232, the authentication key acquisition unit 233, the requesting unit authentication 234, and the lock / unlock request unit 235.

[00215] In the present modality, the description will be made considering that the functions of the authentication key acquisition unit 233, authentication request unit 234, and lock / unlock request unit 235 of the 20Ac mobile terminal are available for the delivery person when the key application is launched.

Petition 870180139491, of 10/09/2018, p. 159/301

80/114 [00216] Authentication key acquisition unit 233 transmits an authentication key acquisition request to delivery management server 50 through communication processing unit 232 in response to a predetermined delivery operation. At that time, the authentication key acquisition request includes the delivery item information described above saved in storage unit 230 in advance. In this way, the delivery management server 50 transmits an authentication key disposition request to the central server 30 in response to the authentication key acquisition request, and the central server 30 provides an authentication key for the mobile terminal 20Ac in response to the authentication key disposition request, as a result of the 20Ac mobile terminal acquiring the authentication key. Thus, since the 20Ac mobile terminal can lock or unlock the trunk lid of the vehicle 10A based on the functions of the communication processing unit 231, the authentication request unit 234 and the lock / unlock request unit. 235, the delivery person can deliver a requested package to the trunk of vehicle 10A, lock the trunk of vehicle 10A as it was and leave.

[00217] As will be described later, delivery service providers can deliver a package to the trunk of the vehicle 10A in a short time. For this reason, in order to smoothly determine the order, and in the same way, delivery, for example, the 20Ac mobile terminal key application may have a function of allowing delivery service providers' deliverers who have a short period delivery times for the trunk of the same vehicle 10A to contact each other. At that moment, when the central server 30 relays information from both in sync with the key applications of

Petition 870180139491, of 10/09/2018, p. 160/301

81/114 delivery service providers, specifically, delivery service providers' deliverers can exchange information with one another, so that it is possible to improve delivery convenience.

Details of the Components Related to the C2C Car Sharing Service [00218] In the following, components related to the C2C car sharing service in the authentication key management system 1 will be described with reference to figure 5.

[00219] Figure 5 is a block diagram that basically illustrates an example of the components related to the C2C car sharing service in the authentication key management system 1. From now on, for figure 5, components related to the car sharing service. C2C car sharing in the authentication key management system 1 will be basically described, and the overlapping description of the components that overlap with the components related to the key sharing service described above, and the like, is omitted as much as possible.

[00220] As described above, the processing device 23 of the mobile terminal 20Aa owned by the user who owns the vehicle 10A includes the communication processing unit 232, the user registration request unit 236, the registration request unit service 237, and the service usage status request unit 238.

[00221] As described above, the user registration request unit 236 requests the registration of the regular user (child user) of vehicle 10A, which uses the various services including the C2C car sharing service, to the central server 30 in response to a predetermined operation of the owner user.

[00222] As described above, the registration request unit

Petition 870180139491, of 10/09/2018, p. 161/301

82/114 of service 237 requests the registration of each registered regular user (the owner user or the child user) with various services including the C2C car sharing service to the central server 30 in response to a predetermined operation of the owner user. [00223] For example, service registration request unit 237 transmits a service registration request to use the C2C car sharing service to the central server 30. The service registration request includes a service login ID a network site for users using the C2C car sharing service corresponding to the C2C 70 car sharing management server (hereinafter referred to as the C2C car sharing site) as the service link information. The service login ID corresponds to the regular user of vehicle 10A, which must be registered.

[00224] As described above, the service usage situation request unit 238 requests information related to the usage situations of the various services, including the C2C car sharing service, by the regular user of vehicle 10A to the central server 30 in response to a predetermined operation by the owner user. The regular user of vehicle 10A has been registered in association with the owner user ID (service usage status information).

[00225] The C2C 70 car sharing management server includes a communication device 71 and processing device 72.

[00226] The communication device 71 is any device that performs bidirectionally the communication with each of the mobile terminals 20 and the central server 30 through a predetermined communication network.

[00227] The processing device 72 includes, for example,

Petition 870180139491, of 10/09/2018, p. 162/301

83/114 a communication processing unit 721, a service cooperation registration unit 722, a backup management unit 723, and a vehicle management unit 724 as functional units that are implemented by running one or more programs stored in the ROM or auxiliary storage device on the CPU. Processing device 72 also includes storage unit 720 which is implemented as a storage area, such as the auxiliary storage device of the server computer.

[00228] The description will be made considering that the information identifying the 10A vehicle for rent has already been registered (saved) in the storage unit 720 through the C2C car sharing site by the regular user (owner user) of the 10A vehicle in association with a service login ID.

[00229] The communication processing unit 721 controls the communication device 71, and exchanges various signals, such as control signals, and information signals, with each of the mobile terminals 20 and the central server 30.

[00230] Service cooperation record unit 722 records information for cooperation between central server 30 and C2C 70 car sharing management server, related to the use of the C2C car sharing service by the regular vehicle user 10A, in response to a service registration termination notification that is received from the central server 30 by the communication processing unit 721.

[00231] For example, service cooperation registration unit 722 adds an indicator to a service login ID included in a service registration termination notification to the user management DB for user management on the sharing site of C2C car built into the storage unit

Petition 870180139491, of 10/09/2018, p. 163/301

84/114

720. The indicator indicates that the user corresponding to the service login ID is a vehicle letter 10A on the C2C car sharing service. In this way, the C2C 70 car sharing management server can cause the central server 30 to provide an authentication key to a tenant's mobile terminal 20Ad, as will be described later, by transmitting a passkey disposition request. authentication including a service login ID corresponding to the regular user of the vehicle 10A, which is a letter, for the central server 30.

[00232] The reservation management unit 723 manages reservations for the use of vehicle 10A. Reservations are made through the C2C car sharing website, or similar.

[00233] For example, reservation management unit 723 receives a 10A vehicle rental date and time record from the regular 10A vehicle user via the C2C car sharing site, or similar, and records (saves ) the rental date and time received at the storage unit 720. At that time, the reservation management unit 723 performs a search for the vehicle usage programming information on the central server 30 through the communication processing unit 721. In this way, the reservation management unit 723 can acquire the latest vehicle usage programming information through the communication processing unit 721. For this reason, for example, when the rental time and date received from the regular vehicle user 10A are already in conflict with another schedule, the C2C 70 car sharing management server can take action, ta l how to request a rental date and time change and record a rental date and time except for the conflicting time excluded from the rental date and time received.

[00234] For example, the reserve management unit 723

Petition 870180139491, of 10/09/2018, p. 164/301

85/114 also receives a reservation to use the 10A vehicle within the 10A vehicle rental date and time. The rental date and time for vehicle 10A are saved to storage unit 720. As reservation management unit 723 receives a reservation for the use of vehicle 10A from a user who is a lessee via the C2C car sharing site , the reservation management unit 723 updates the information pertaining to vehicle rental schedule 10A (rental schedule information). Rental schedule information is saved to storage unit 720.

[00235] For example, when the communication processing unit 721 receives an authentication key acquisition request from the mobile tenant's 10Ad mobile terminal 10A, the reservation management unit 723 determines whether the key acquisition request authentication is a regular authentication key acquisition request. Specifically, the reservation management unit 723 can perform the determination based on the C2C car sharing site service login ID and password, included in the authentication key acquisition request, and a relationship to a date and time of reservation (for example, if the date and time of receipt of the authentication key acquisition request is within the reservation date and time, be a period of time from the date and time of receipt of the key acquisition request time for an initial date and time is shorter than a predetermined time, or similar). When the authentication key acquisition request is a regular authentication key acquisition request, the reserve management unit 723 transmits an authentication key disposition request to the central server 30 through the communication processing unit 721. At this time, Petition 870180139491, of 10/9/2018, p. 165/301

86/114 authentication key arrangement includes information for the identification of the mobile terminal 20Ad of the tenant of the vehicle 10A. The vehicle tenant identification information 10A can be, for example, an authentication ID to obtain user authentication (hereinafter referred to as a tenant ID for convenience) on the central server 30 so that the tenant of the vehicle vehicle 10A use the function of the 233 authentication key acquisition unit of the 20Ad mobile terminal. In this way, the mobile terminal 20Ad of the vehicle tenant 10A can acquire an authentication key from the central server 30.

[00236] Vehicle management unit 724 manages vehicle 10A for rent.

[00237] For example, vehicle management unit 724 performs a search on the current location information of vehicle 10A to central server 30 through communication processing unit 721 before a vehicle reservation date and time 10A ( for example, a period of several tens of minutes before until shortly after). The vehicle management unit 724 acquires the current location information of the vehicle 10A via the communication processing unit 721. The current location information is returned from the central server 30 in response to the search. In this way, before a scheduled rental date and time (date and time reservation) of vehicle 10A, it is possible to determine, for example, whether vehicle 10A has returned to a designated location. For this reason, when vehicle 10A has not returned to a designated location, the C2C 70 car sharing management server can perform the action, such as issuing an alarm to the regular user which is vehicle letter 10A to return the designated location via email or a predetermined application that cooperates with the C2C car sharing site and that is

Petition 870180139491, of 10/09/2018, p. 166/301

87/114 installed on the mobile terminal 20Aa or the mobile terminal 20Ab.

[00238] As described above, the processing device 32 of the central server 30 includes the communication processing unit 321, the condition determination unit 322, the authentication key issuing unit 323, the information management unit of location 324, the programming management unit 325, the record management unit 326, the authentication key usage coordination unit 328, and the storage unit 320.

[00239] When the communication processing unit 321 receives an authentication key disposition request from the C2C car sharing management server 70, condition determination unit 322 determines whether the authentication key disposition request is a regular authentication key disposition request. For example, condition determination unit 322 determines whether the authentication key disposition request is a regular authentication key disposition request based on the service link information (a service login ID from the sharing site). C2C car, or similar) included in the authentication key disposition request or predetermined authentication information (for example, an ID and password, or similar) corresponding to the C2C 70 car sharing management server.

[00240] When condition determination unit 322 determines that the authentication key disposition request is an authentication key disposition request, the authentication key issuance unit 323 identifies vehicle 10A corresponding to the disposition request for authentication key. authentication key based on the user unit and service registration information DB 320 storage unit. The authentication key issuing unitPetition 870180139491, of 10/9/2018, p. 167/301

88/114 tion 323 issues an authentication key for a limited time (for example, an authentication key available only within a 10A vehicle reservation date and time, included in the authentication key disposition request, and storage periods before and after the reservation date and time). The authentication key issuing unit 323 distributes the authentication key to the mobile terminal 20Ad of the vehicle tenant 10A through the communication processing unit 321. The tenant is identified by the authentication key disposition request.

[00241] The C2C car sharing service may include, for example, a service for renting only the trunk of the vehicle 10A (C2C trunk sharing service). In the case of a vehicle trunk rental service, the authentication key issuing unit 323 only needs to issue an authentication key with limited permission that only allows the trunk lid to be locked or unlocked. In this way, it is possible to limit an object for rent on the C2C car share to the trunk only. Thus, for example, a trunk delivery service to allow a person to rent the trunk of the 10A vehicle to rent during a trip and to arrange for the purchased products to be delivered for use during the journey to the rented trunk. , can be accomplished.

[00242] Location information management unit 324 transmits a location information request to vehicle 10A via communication processing unit 321 in response to a search for the current location of vehicle 10A. The survey is received from the C2C 70 car sharing management server by the communication processing unit 321. In this way, the location information management unit 324 can acquire the current location information of vehicle 870180139491, from 10/9 / 2018, p. 168/301

89/114 ico 10A through the communication processing unit 321. The location information management unit 324 returns the current location information acquired from the vehicle 10A to the C2C car sharing management server 70 through the processing unit of communication 321.

[00243] Programming management unit 325 transmits the latest vehicle usage programming information to vehicle 10A via communication processing unit 321 in response to the survey on the current location of vehicle 10A. The poll is received from the C2C 70 car sharing management server by the 321 communication processing unit.

[00244] As described above, registration management unit 326 registers a regular user (child user) who uses various services including the C2C car sharing service in response to a user registration request that is received from the mobile terminal 20Aa of the owner user by the communication processing unit 321. As described above, record management unit 326 also registers the regular user of vehicle 10A with the C2C car sharing service in response to a service registration request that is received of the proprietary user's mobile terminal 20Aa by the communication processing unit 321. As described above, when record management unit 326 completes registration with various services including the C2C car sharing service, record management unit 326 also provides notification of completion of registration for te mobile terminal 20Aa or mobile terminal 20Ab, corresponding to the regular user to be registered, through the communication processing unit 321. When the registration management unit 326 completes the registration with the registration service

Petition 870180139491, of 10/09/2018, p. 169/301

90/114 C2C car sharing, record management unit 326 transmits a service registration termination notification including service link information to the C2C 70 car sharing management server that manages the service operations intended for record.

[00245] As described above, the processing device 23 of the mobile terminal 20Ad of the vehicle renter 10A includes the communication processing unit 231, the communication processing unit 232, the authentication key acquisition unit 233, the unit authentication request 234, lock / unlock request unit 235, and storage unit 230.

[00246] Authentication key acquisition unit 233 transmits an authentication key acquisition request to the C2C 70 car sharing management server through communication processing unit 232 in response to a predetermined operation from the vehicle renter 10A. At that time, the authentication key acquisition request includes a service login ID from the C2C car sharing site. The service login ID corresponds to the tenant of the vehicle 10A. In this way, the C2C car sharing management server 70 transmits an authentication key disposition request to the central server 30 in response to the authentication key disposition request and the central server 30 distributes an authentication key to the terminal mobile 20Ad, with the result that the mobile 20Ad acquires the authentication key. In this way, the 20Ad mobile terminal can lock or unlock vehicle doors 10A based on the functions of the communication processing unit 231, authentication request unit 234 and lock / unlock request unit 235. That is, with the service car sharing company, vehicle tenant 10A,

Petition 870180139491, of 10/09/2018, p. 170/301

91/114 who owns the 20Ad mobile terminal, can directly use the 10A vehicle, for example, lock or unlock the 10A vehicle or drive the 10A vehicle, using the 20Ad mobile terminal without transferring a key to or from regular users of the vehicle 10A. Similarly, each regular user of the 10A vehicle can rent the 10A vehicle to a person in addition to the regular users without providing a key. For this reason, it is possible to improve the convenience in renting the 10A vehicle between each regular user of the 10A vehicle and one person in addition to the regular users with the C2C car sharing service in the authentication key management system 1. Component Details Related to the B2C Car Sharing Service [00247] In the following, the components related to the B2C car sharing service in the authentication key management system 1 will be described with reference to figure 6.

[00248] Figure 6 is a block diagram that basically illustrates an example of components related to the B2C car sharing service in the authentication key management system 1. Hereinafter, for figure 6, the components related to the service of B2C car sharing in the authentication key management system 1 will be basically described, and the overlapping description of components that overlap with the components related to the key sharing service described above, and the like, is omitted as much as possible.

[00249] The B2C car sharing management server 80 includes a communication device 81 and processing device 82.

[00250] Communication device 81 is any device that performs bidirectional communication with each mobile terminal 20B and central server 30 through a communication network prePetition 870180139491, of 10/9/2018, p. 171/301

92/114 determined.

[00251] Processing device 82 includes, for example, a communication processing unit 821, a backup management unit 822, and a vehicle management unit 823 as functional units that are implemented by running one or more programs ROM or auxiliary storage device on the CPU. Processing device 82 also includes storage unit 820 which is implemented as a storage area, such as the auxiliary storage device of the server computer.

[00252] The communication processing unit 821 controls the communication device 81, and exchanges various signals, such as control signals and information signals, with each mobile terminal 20B and central server 30.

[00253] The reservation management unit 822 manages the reservations for use of vehicle 10B. Reservations are made through the B2C car sharing website, or similar.

[00254] For example, reservation management unit 822 receives a reservation for the use of vehicle 10B from a user who wishes to rent vehicle 10B (hereinafter referred to as a tenant user) through a network site which is operated by a commercial operator of the B2C 80 car sharing management server, or similar (hereinafter referred to as the B2C car sharing site for convenience). The reservation management unit 822 saves the reservation information received for the use of the vehicle 10A (reservation usage information) in the storage unit 820. At that moment, the reservation reservation information includes, for example, the information identifying the desired vehicle 10A, information related to a reservation date and time of use (an initial date and time and a fiPetition date and time 870180139491, from 10/09/2018, page 172/301

93/114 nal), a service user login ID on the B2C car sharing site, and the like.

[00255] For example, each time the reservation management unit 822 receives a reservation for the use of vehicle 10B, the reservation management unit 822 updates information related to a vehicle usage schedule 10B (usage schedule information vehicle) saved in the 820 storage unit. In this way, the B2C 80 car sharing management server can illustrate the date and time available for reservation for the renter user by having the B2C car sharing site display the schedule of use of vehicle 10B.

[00256] For example, when the communication processing unit 821 receives an authentication key acquisition request from the mobile terminal 20B, the reserve management unit 822 determines whether the authentication key acquisition request is an acquisition request of regular authentication key. Specifically, the reservation management unit 822 can perform the determination based on the B2C car sharing site service login ID and password and a relationship to a reservation date and time (for example, if the reservation date and time receipt of the authentication key acquisition request are within the reservation date and time, if a period of time from the receipt of the authentication key acquisition request until an initial date and time is less than than a predetermined time, or similar). The B2C car sharing site service login ID and password corresponds to the renter user and is included in the authentication key acquisition request. When the authentication key acquisition request is a regular authentication key acquisition request, the unit

Petition 870180139491, of 10/09/2018, p. 173/301

Reservation Management 94/114 822 transmits an authentication key disposition request to the central server 30 through the communication processing unit 821. At that time, the authentication key disposition request includes the information for identifying the mobile terminal 20B of the tenant user who rents the vehicle 10B. The identification information for the tenant user who rents the vehicle 10B can be, for example, an authentication ID to obtain user authentication (hereinafter referred to as tenant user ID for convenience) on the central server 30 so that the tenant user who rents the vehicle 10B uses the functions of the key application, corresponding to the authentication key acquisition unit 233, and the like, of the mobile terminal 20B. In this way, the mobile terminal 20B of the tenant user who rents the vehicle 10B can acquire an authentication key from the central server 30.

[00257] Vehicle management unit 823 manages vehicle 10B for rent.

[00258] For example, vehicle management unit 823 conducts a search on vehicle 10B parked near (for example, about several hundred meters, or the like) from a designated location on a reservation for central server 30, via the communication processing unit 821, before a vehicle reservation date and time 10B for a tenant user (for example, several tens of minutes before). Vehicle management unit 823 acquires location information from vehicle 10B parked near the designated location via communication processing unit 821. Location information is returned from central server 30 in response to the search. That way, before the date and time when the lessee starts using vehicle 10B, vehicle management unit 823 can identify one or one

Petition 870180139491, of 10/09/2018, p. 174/301

95/114 plurality of vehicles 10B parked around the designated location, and determining, for example, which vehicle 10B to rent.

[00259] For example, vehicle management unit 823 performs a search for vehicle location information 10B in an area designated for central server 30 through communication processing unit 821 in response to a search request for a vehicle 10B in the designated area from the renter user on the B2C car sharing site. Vehicle management unit 823 acquires vehicle location information 10B in the designated area via communication processing unit 821. Location information is returned from central server 30 in response to the search. In this way, vehicle management unit 823 is, for example, able to illustrate the location information of the intended vehicle 10B for the renter user who wants to immediately rent the vehicle 10B in the designated area on the B2C car sharing site.

[00260] As described above, processing device 32 of central server 30 includes communication processing unit 321, condition determining unit 322, authentication key issuing unit 323, and storage unit 320.

[00261] When communication processing unit 321 receives an authentication key disposition request from the B2C car sharing management server 80, condition determination unit 322 determines whether the authentication key disposition request it is a regular authentication key disposition request. For example, condition determination unit 322 determines whether the authentication key disposition request is a regular authentication key disposition request based on whether the user ID

Petition 870180139491, of 10/09/2018, p. 175/301

96/114 tenant included in the authentication key disposition request is an authentication ID registered on storage unit 320 or predetermined authentication information (for example, an ID and password, or similar) corresponding to the share management server B2C car 80.

[00262] When condition determination unit 322 determines that the authentication key disposition request is a regular authentication key disposition request, the authentication key issuing unit 323 issues an authentication key for a limited time (for example, an authentication key available only within a 10B vehicle reservation date and time, included in the authentication key disposition request, and storage periods before and after the reservation date and time). The authentication key issuing unit 323 distributes the authentication key to the mobile terminal 20B of the tenant user who rents the vehicle 10B via communication processing unit 321. The tenant user is identified by the authentication key disposition request.

[00263] As described above, the processing device 23 of the mobile terminal 20B of the renter user renting the vehicle 10B includes a communication processing unit 231, a communication processing unit 232, the authentication key acquisition unit 233 , the authentication request unit 234, the lock / unlock request unit 235 and the storage unit 230.

[00264] Authentication key acquisition unit 233 transmits an authentication key acquisition request to the B2C car sharing management server 80 through communication processing unit 232 in response to a predetermined operation by the tenant user who rent

Petition 870180139491, of 10/09/2018, p. 176/301

97/114 the 10Β vehicle. At that time, the authentication key acquisition request includes a service login ID from the B2C car sharing site or similar. The service login ID corresponds to the tenant user who rents vehicle 10B. In this way, the B2C car sharing management server 80 transmits an authentication key disposition request to the central server 30 in response to the authentication key acquisition request, and the central server 30 provides an authentication key for the mobile terminal 20B in response to the authentication key provision request, with the result that mobile terminal 20B acquires the authentication key. In this way, the mobile terminal 20B can lock or unlock vehicle doors 10B based on the functions of the communication processing unit 231, authentication request unit 234 and lock / unlock request unit 235. That is, with the service of car sharing B2C, the renter user who rents vehicle 10B and is the owner of mobile terminal 20B can directly use vehicle 10B, for example, lock or unlock vehicle 10B or drive vehicle 10B, using the mobile terminal 20B without handling a key to or from the commercial operator, or similar, of the vehicle 10B. For this reason, it is possible to improve the convenience of the renter user who rents the 10B vehicle with the B2C car sharing service in the authentication key management system 1.

Central Server Characteristic Operations [00265] Next, the characteristic operations of the central server 30, that is, the process flow of the coordination unit using the authentication key 328, will be described with reference to figure 7 to figure 10.

[00266] Figure 7 is a flowchart that schematically illustrates an example of a coordination process that is performed by

Petition 870180139491, of 10/09/2018, p. 177/301

98/114 authentication key usage coordination unit 328. A process according to this flowchart is performed repeatedly at predetermined processing intervals. Henceforth, this also applies to the flowcharts of figures 8 to 10.

[00267] In step S702, the authentication key usage coordination unit 328 determines whether the communication processing unit 321 received an authentication key disposition request from service management servers 40 (such as the management server delivery 50 and the C2C 70 car sharing management server), which several service providers operate.

[00268] In step S704, the authentication key usage coordination unit 328 determines whether an authentication key associated with a service that is provided by a first commercial operator, different from a commercial operator corresponding to the request for disposition of the access key. authentication, was provided for the mobile terminal 20 of a person (third party) different from the regular users of vehicle 10A. When an authentication key has been provided for the mobile terminal 20 associated with a service that is provided by the first commercial operator (for example, the mobile terminal 20Ac of a delivery person from a delivery service provider), the user utilization coordination unit authentication key 328 proceeds to step S706; otherwise, the authentication key usage coordination unit 328 proceeds to step S708.

[00269] In step S706, the authentication key usage coordination unit 328 sets an available period that does not conflict with an available period that is assigned to the authentication key associated with a service that is provided by the first commercial operator and supplied to mobile terminal 20 of

Petition 870180139491, of 10/09/2018, p. 178/301

99/114 third part.

[00270] On the other hand, in step S708, the authentication key usage coordination unit 328 configures an available period that is designated by the authentication key disposition request, or similar.

[00271] In step S710, the authentication key issuing unit 323 issues an authentication key with permission from the available period configured in step S706 or step S708.

[00272] In step S712, the authentication key issuing unit 323 provides the authentication key issued to the desired mobile terminal 20, and terminates the current process.

[00273] Thus, since the available period of the authentication key that is distributed to the mobile terminal 20 corresponds to the first commercial operator and the available period of the authentication key that is provided to the mobile terminal 20 corresponding to the second non-commercial operator conflict with each other, it is possible to avoid using the authentication key simultaneously.

[00274] Subsequently, figure 8 is a flowchart that schematically illustrates another example of the coordination process that is performed by the coordination unit using the authentication key 328. From now on, in this example, the description will be made considering that , when the trunk has been unlocked or locked by using the authentication key using the Ac mobile terminal of a delivery person, the DCM 14 of vehicle 10A transmits this fact (a trunk unlock notification or a lock notification) trunk) to the central server 30.

[00275] In step S802, the authentication key usage coordination unit 328 determines whether the communication processing unit 321 has received the trunk unlock notification from vehicle 10A. When the community processing unit 870180139491, of 10/09/2018, p. 179/301

100/114 communication 321 received the notification of unlocking the trunk of vehicle 10A, the authentication key usage coordination unit 328 proceeds to step S804; otherwise, the authentication key usage coordination unit 328 terminates the current process.

[00276] In step S804, the authentication key usage coordination unit 328 invalidates the authentication key that was provided for mobile terminal 20 associated with a service from a second commercial operator. For example, an authentication key usage coordination unit 328 transmits an invalidation notification to vehicle 10A through communication processing unit 321. The invalidation notification designates the authentication key as invalidated. Thus, even when an authentication request, or similar, including an authentication key to be invalidated, is received, the key unit 12 of the vehicle 10A can interrupt the unlocking, or similar, of the doors of the vehicle 10A.

[00277] In step S806, the authentication key usage coordination unit 328 determines whether the communication processing unit 321 received the notification to lock the trunk of the vehicle 10A. When the communication processing unit 321 received the notification to lock the trunk of vehicle 10A, the authentication key usage coordination unit 328 determines that the job of delivering a package to the trunk has ended, and proceed to step S808; otherwise, the authentication key usage coordination unit 328 repeats the process of step S806.

[00278] In step S808, the authentication key usage coordination unit 328 validates the authentication key that was distributed to the mobile terminal 20 associated with the second service

Petition 870180139491, of 10/09/2018, p. 180/301

101/114 commercial operator. For example, the authentication key usage coordination unit 328 transmits a validation notification to vehicle 10A through communication processing unit 321. The validation notification designates the authentication key to be validated. Accordingly, when an authentication request, or similar, including the validated authentication key, has been received, vehicle key unit 12A 10A may allow the doors of vehicle 10A to be unlocked or similar.

[00279] Thus, when a delivery person from a delivery service provider that provides a delivery service for trunk is loading a package into the trunk, the authentication key that was provided for mobile terminal 20 associated with a service of the second commercial operator is invalidated, in order to avoid the simultaneous use of the authentication key.

[00280] In this example, the description is made by illustrating a delivery service for trunk; however, a desired service may be a trunk pick-up service or trunk pick-up service to access the 10A vehicle trunk. Henceforth, the same applies to figure 9 and figure 10.

[00281] Subsequently, figure 9 is a flowchart that schematically illustrates another additional example of the coordination process that is performed by the coordination unit using the authentication key 328.

[00282] In step S902, the authentication key usage coordination unit 328 determines whether the mobile terminal 20Ac of a delivery person for a trunk delivery service has reached an area within a predetermined range of the vehicle 10A. At that moment, the authentication key usage coordination unit 328 acquires the location information of vehicle 10A by conducting a search in the location information management unitPetition 870180139491, of 10/09/2018, p. 181/301

102/114 lization 324. The authentication key usage coordination unit 328 can use the location information from the mobile terminal 20Ac, which is received from the delivery management server 50 by the communication processing unit 321. Alternatively, the authentication key usage coordination unit 328 can directly acquire the location information of the mobile terminal 20Ac through the communication processing unit 321. When the mobile terminal 20Ac of a courier delivery service reaches the area within the predetermined range of the vehicle 10A, the authentication key usage coordination unit 328 proceeds to step S904; otherwise, the authentication key usage coordination unit 328 terminates the current process.

[00283] In step S904, the authentication key usage coordination unit 328 determines whether a delivery person from another delivery service provider is working for a delivery service for the trunk (carrying a package inside the trunk) . For example, when the communication processing unit 321 receives the notification to unlock the trunk of the vehicle 10A and has not yet received the notification to lock the trunk, the authentication key usage coordination unit 328 may determine that the delivery man is still working on a trunk delivery service. When a delivery person from another delivery service provider is working for a trunk delivery service, the authentication key usage coordination unit 328 proceeds to step S906; otherwise, the authentication key usage coordination unit 328 proceeds to step S908.

[00284] In step S906, the authentication key usage coordination unit 328 determines whether the processing unit

Petition 870180139491, of 10/09/2018, p. 182/301

Communication 103/114 321 received the notification to lock the trunk from vehicle 10A. When the communication processing unit 321 receives the notification to lock the trunk of the vehicle 10A, the authentication key usage coordination unit 328 proceeds to step S908; otherwise, the authentication key usage coordination unit 328 repeats the process for this step.

[00285] In step S908, the authentication key usage coordination unit 328 issues an authentication key of which an available period or number of times is limited, provides the authentication key issued to the delivery person's 20Ac mobile terminal, and terminate the current process.

[00286] Thus, since an authentication key is not provided until a delivery person approaches the 10A vehicle relatively well, it is possible to make it difficult to provide an authentication key for the 20Ac mobile terminals of the deliverers of a plurality of providers delivery service. Even when a courier approaches the 10A vehicle relatively well, but when a courier from another delivery service provider is working, an authentication key is not provided until the end of the job, so that reliably can be avoided. mobile terminals 20 associated with a plurality of commercial operators simultaneously use the vehicle authentication key 10A.

[00287] Subsequently, figure 10 is a flowchart that schematically illustrates another example of the coordination process that is performed by the coordination unit using the authentication key 328. In this example, the description will be made considering that a key authentication that is only available for the minimum number of times needed (e.g. twice,

Petition 870180139491, of 10/09/2018, p. 183/301

104/114 (that is, to lock and unlock), be delivered to the mobile terminal 20Ac of a delivery person for the delivery of a package inside the trunk.

[00288] In step S1002, the authentication key usage coordination unit 328 determines whether the communication processing unit 321 received an authentication key disposition request from a delivery service provider (delivery management server 50 ). When the communication processing unit 321 has received an authentication key disposition request from a delivery service provider, the authentication key usage coordination unit 328 proceeds to step S1004; otherwise, the authentication key usage coordination unit 328 terminates the current process.

[00289] In step S1004, the authentication key usage coordination unit 328 determines whether an authentication key has been provided for the 20Ac mobile terminal associated with another delivery service provider.

[00290] In step S1006, the authentication key usage coordination unit 328 determines whether the authentication key that was provided for the 20Ac mobile terminal associated with another delivery service provider has been used the number of times available. For example, when the authentication key was used, the authentication key usage coordination unit 328 can determine how many times the authentication key was used by loading information related to the authentication key from vehicle 10A to the central server 30 as in the case of the notification to unlock the trunk, the notification to lock the trunk, or similar. When the authentication key has been used for the available number of times, the authentication key usage coordination unit 328 determines that the placement of a package 870180139491, of 10/09/2018, p. 184/301

105/114 te in the trunk by the delivery man from another delivery service provider has been completed, and proceeds to step S1008; otherwise, the authentication key usage coordination unit 328 repeats the process for this step.

[00291] In step S1008, the authentication key issuing unit 323 issues an authentication key with permission of which the available number of times is limited to the minimum number of times required.

[00292] In step S1010, the authentication key issuing unit 323 provides the authentication key for the delivery person's 20Ac mobile terminal which is designated by the authentication key disposition request and terminates the current process.

[00293] Thus, as long as the authentication key that was provided to the 20Ac mobile terminal from a delivery service provider's deliverer has not been used the available number of times, the authentication key is not provided to the terminal 20Ac mobile phone from a courier from a delivery service provider who subsequently places a package in the trunk. Therefore, it is possible to prevent mobile terminals 20 associated with a plurality of commercial operators from simultaneously using the vehicle authentication key 10A. Since the available number of times is set to the minimum number of times required for a trunk delivery service, it is possible to provide an authentication key to the subsequent delivery service provider each time a delivery to a delivery service provider's trunk is terminated.

[00294] In this example, when an authentication key is required again for the same reasons (for example, wrong package placement, non-package placement, or the like), a delivery person transmits an authentication key acquisition request to

Petition 870180139491, of 10/09/2018, p. 185/301

106/114 from the 20Ac mobile terminal to the delivery management service 50, and the authentication key is provided again.

Operation [00295] In the present modality, the authentication key issuing unit 323 distributes the key information (authentication key) to the mobile terminal 20 (that is, the mobile terminal 20 of a third party in addition to the regular vehicle users 10A). Mobile terminal 20 corresponds to each of a plurality of commercial operators that provide regular users of vehicle 10A with a predetermined service using vehicle 10A. The key information is the information to unlock vehicle 10A or start vehicle 10A when a predetermined transmission signal is transmitted in the direction of vehicle 10A. When the mobile terminal 20, corresponding to a first commercial operator among the plurality of commercial operators that provide the predetermined service, uses the authentication key, the programming management unit 325 or the authentication key usage coordination unit 328 performs coordination so that the mobile terminal 20, corresponding to a second commercial operator among the plurality of commercial operators, does not use the authentication key.

[00296] Thus, when the plurality of commercial operators each provide a service using the vehicle 10, the central server 30 can perform the coordination so that only the mobile terminal 20, corresponding to the first commercial operator can use the key authentication at the same time. Therefore, when the plurality of commercial operators each provide a service using vehicle 10A, it is possible to improve the safety of vehicle 10A.

[00297] In the present modality, the coordination key usage unit 328 limits the authentication key

Petition 870180139491, of 10/09/2018, p. 186/301

107/114 that is provided for mobile terminal 20, corresponding to the first commercial operator by the authentication key issuing unit 323, so that the authentication key is only available in a first period, and limits the authentication key that is provided to mobile terminal 20, corresponding to the second commercial operator by the authentication key issuing unit 323, so that the authentication key is only available in a second period that does not conflict with the first period.

[00298] In this way, the central server 30 can prevent a conflict between a period during which the mobile terminal 20, corresponding to the first commercial operator, uses the authentication key and a period during which the mobile terminal 20, corresponding to the second commercial operator uses the authentication key. Therefore, the central server 30 is specifically capable of coordinating, so that only the mobile terminal 20, corresponding to the first commercial operator, can use the authentication key at the same time.

[00299] In the present modality, the authentication key issuing unit 323 provides the authentication key for the mobile terminal 20 of a worker who works in the distribution of a package corresponding to a delivery service for trunk, collection work of a package, in correspondence with a trunk collection service, or works to collect an item corresponding to a trunk collection service. When the worker corresponding to the first commercial operator is working, based on the use of the authentication key by the worker's mobile terminal 20, corresponding to the first commercial operator, the authentication key usage coordination unit 328 disables the use of the authentication key acquired by the mobile terminal 20

Petition 870180139491, of 10/09/2018, p. 187/301

108/114 of the worker, corresponding to the second commercial operator, unless the worker, corresponding to the first commercial operator, finishes his work.

[00300] In this way, the central server 30 can disable the use of the authentication key acquired by the mobile terminal 20 of the worker of the second commercial operator until the worker of the first commercial operator, who provides the delivery service for trunk, or similarly, finish your job, such as delivery. Therefore, the central server 30 is specifically capable of allowing only the worker's mobile terminal 20, corresponding to the first commercial operator, among the plurality of commercial operators that provide the delivery service for trunk, or similar, to use the authentication at the same time.

[00301] In the present modality, the authentication key issuing unit 323 provides the authentication key for the mobile terminal 20 of a worker who works in the delivery of a package, corresponding to a delivery service in the trunk, works with the collection of a package, corresponding to a collection service in the trunk, or works to collect an article, corresponding to a collection service of the trunk. When the mobile terminal 20 of the worker corresponding to the first commercial operator reaches an area within a predetermined range of the vehicle 10A, the authentication key usage coordination unit 328 causes the authentication key issuing unit 323 to provide the key of authentication for the worker's mobile terminal 20, corresponding to the first commercial operator. Thereafter, when the worker's mobile terminal 20, corresponding to the second commercial operator, reaches the area within the predetermined range of the vehicle 10A in a situation in which the worker, corresponding to the first commercial operator, is working,

Petition 870180139491, of 10/09/2018, p. 188/301

109/114 based on the use of the authentication key by the worker's mobile terminal 20, corresponding to the first commercial operator, the authentication key usage coordination unit 328 causes the authentication key issuing unit 323 to provide the key of authentication for the worker's mobile terminal 20, corresponding to the second commercial operator at the moment when the worker, corresponding to the first commercial operator, finishes his work.

[00302] Thus, the central server 30 can disable the delivery of the authentication key to the mobile terminal 20 of the worker of the second commercial operator, who came close to vehicle 10A, until the worker of the first commercial operator, who provides the service delivery to the trunk, or similar, finish the job, such as delivering a package to the trunk of the vehicle 10A. Therefore, the central server 30 is specifically capable of allowing only the worker's mobile terminal 20, corresponding to the first commercial operator, among the plurality of commercial operators that provide the delivery service for trunk, or similar, to use the authentication at the same time.

[00303] In the present modality, the authentication key issuing unit 323 provides the authentication key for the mobile terminal 20 of a worker who works to deliver a package, corresponding to a delivery service for trunk, works in the collection of a package, corresponding to a trunk collection service, or works to collect an item, corresponding to a collection service in trunk. The authentication key usage coordination unit 328 limits the number of times the authentication key will be available to a predetermined number of times, the authentication key is provided to the worker's mobile terminal 20, corresponding to each

Petition 870180139491, of 10/09/2018, p. 189/301

110/114 among the plurality of commercial operators by the authentication key issuing unit 323, and, when the worker's mobile terminal 20, corresponding to the first commercial operator, used the authentication key for the predetermined number of times, the coordination unit using authentication key 328 causes the authentication key issuing unit 323 to provide the authentication key to the worker's mobile terminal 20, corresponding to the second commercial operator.

[00304] In this way, the central server 30 can configure the number of times (for example, twice, that is, unlock and lock or similar) uses of the authentication key required from workers, among the plurality of commercial operators that provide the delivery service for trunk, or similar, so that they can work, such as the delivery of a package in the trunk of the vehicle 10A, the predetermined number of times. For this reason, the central server 30 may disable the provision of the authentication key for the mobile terminal 20 of the worker of the second commercial operator, who has approached the vehicle 10A, until the worker of the first commercial operator finishes his work, such as delivery of a package in the trunk of vehicle 10A. Therefore, the central server 30 is specifically capable of allowing only the worker's mobile terminal 20, corresponding to the first commercial operator providing the delivery service to the trunk, or similar, to use the authentication key at the same time.

[00305] In the present modality, the central server 30 relays the information between the worker’s mobile terminal 20, corresponding to the first commercial operator, and the worker’s mobile terminal 20, corresponding to the second commercial operator.

[00306] Thus, the central server 30 can allow the priPetição 870180139491, of 10/09/2018, p. 190/301

111/114 the first commercial operator and the second commercial operator, who provide the delivery service for trunk, or similar, get in direct contact with each other. For this reason, for example, when there is a package from the first commercial operator and a package from the second commercial operator and the same time period for delivery is assigned to these packages, it is possible to allow workers from the first commercial operator and the second commercial operator to adjust the specific delivery time. Therefore, the central server 30 can enhance the convenience, and the like, of the plurality of commercial operators providing the delivery service for trunk, or the like.

[00307] In the present modality, when a vehicle usage schedule 10, associated with the predetermined service corresponding to the first commercial operator, is configured in a first period, the programming management unit 325 maintains a period that conflicts with the first period , so that a vehicle usage schedule 10A, associated with the predetermined service corresponding to the second commercial operator, is not configured in the period.

[00308] In this way, central server 30 can prevent a conflict between a period of time during which vehicle 10A is used for the service that is provided by the first commercial operator and a period of time during which vehicle 10A is used for the service that is provided by the second commercial operator. Therefore, the central server 30 is specifically capable of coordinating, so that only the mobile terminal 20, corresponding to the first commercial operator, can use the authentication key at the same time.

[00309] In the present modality, when a first period of time has already been designated as a period of delivery time for a

Petition 870180139491, of 10/09/2018, p. 191/301

112/114 product with trunk delivery service corresponding to the first commercial operator, the programming management unit 325 disables the regular user of vehicle 10A from selecting a time period that conflicts with the first time period, in the same date, on an EC site, as a delivery time period for a product with the delivery service corresponding to the second commercial operator.

[00310] Thus, when the regular user of vehicle 10A places an order for a product on the EC website, the central server 30 can disable the selection of a time period that conflicts with an already designated delivery time period for a product by the first trader by the first trader, as a delivery time period for a product by the second trader. Therefore, the central server 30 is specifically capable of allowing only the mobile terminal 20 of the worker, corresponding to the first commercial operator, among the plurality of commercial operators that provide the delivery service for portamalas, deliver a product purchased on the EC site, use the authentication key at the same time.

[00311] The embodiment of the invention is described in detail above; however, the invention is not limited to the specific modality. Various modifications or changes are applicable within the scope of the invention mentioned in the appended claims.

[00312] For example, in the mode described above, the mobile terminal 20 transmits an authentication request including an authentication key to the key unit 12, the key unit 12 exchanges signals with the locking / unlocking and starting device 11 , in response to an authentication result based on the authentication key, and the locking or unlocking of the doors of vehicle 10A or the switching on of vehicle 10A is performed by the transPetition device 870180139491, of 10/09/2018, pg. 192/301

113/114 car / unlock and start 11; however, the invention is not limited to that mode.

[00313] Specifically, the function of the key unit 12 can be transferred to the mobile terminal 20, and the locking or unlocking of the vehicle doors 10A or the starting of the vehicle 10A can be performed by the locking / unlocking and starting device 11 , as the mobile terminal 20 exchanges signals based on the key information with a vehicle 10 (the locking / unlocking and starting device 11) over the LF radio waves and RF radio waves. In this case, the authentication key in the mode described above only needs to be read as key information. That is, the central server 30 can issue the key information instead of an authentication key and distribute the key information to the mobile terminal 20 with a method similar to the authentication key in the mode described above. In this way, the operation and advantageous effects similar to those of the modality described above are obtained.

[00314] The function of the key unit 12 can be integrated with the locking / unlocking and starting device 11, and the components related to the communication between the locking / unlocking and starting device 11 and the key unit 12 and the communication-related authentication (the radio wave transmitter LF 111, the radio wave receiver RF 112, the compensation ECU 113, the radio wave receiver LF 121, and the radio wave transmitter RF 122) can be omitted. In that case, when authentication of the mobile terminal 20 is successful based on an authentication key, the key ECU 124 can directly send an instruction to unlock or lock to the body ECU 114 or an instruction to start the Engine ECU 116, instead of compensation ECU 113, and causes body ECU 114 to lock or unlock vehicle doors 10 and causes engine ECU 116

Petition 870180139491, of 10/09/2018, p. 193/301

114/114 start engine 10. Thus, operation and advantageous effects similar to those of the modality described above are obtained.

Claims (14)

1. Service support device (30), characterized by the fact that it comprises: an information processing device (32) configured to (i) provide key information to a mobile terminal (20; 20Ac; 20Ad; 20B), the mobile terminal corresponding to each of a plurality of commercial operators that provide a user of a vehicle (10; 10A; 10B) a predetermined vehicle usage service, the key information being information for unlocking the vehicle, starting the vehicle, or unlocking and starting the vehicle when a predetermined transmission signal is transmitted to the vehicle; and (ii) when the mobile terminal corresponding to a first commercial operator, among the plurality of commercial operators, uses the key information, perform the coordination so that the mobile terminal, corresponding to a second commercial operator, among the plurality of operators do not use key information. 2. Service support device according to claim 1, characterized by the fact that the information processing device is configured to limit the key information that is provided to the mobile terminal, corresponding to the first mobile operator, so that the key information is only available in a first period, and limit the key information that is provided to the mobile terminal, corresponding to the second commercial operator, so that the key information is only available in a second period, which does not conflicts with the first period. 3. Service support device, according to the Petition 870180139491, of 10/09/2018, p. 195/301 2/7 vindication 1, characterized by the fact that: the predetermined service is any one of a delivery service that allows a vehicle's luggage compartment to be designated as a delivery address for a package, a pick-up service that allows the luggage compartment to be designated as a pick-up address for a package, and a collection service that allows the luggage compartment to be designated as a collection address for an article; the information processing device is configured to distribute the key information to each of a plurality of mobile terminals (20Ac, 20Ad) of the workers who conduct the work for delivery of the package, collection of the package, or collection of the article, the work corresponding to the predetermined service; and the information processing device is configured to, when a worker corresponding to the first commercial operator, among the workers, is performing a job based on the use of key information, by the worker's mobile terminal (20Ac), corresponding to the first operator commercial, disable the use of the key information acquired by the mobile terminal (20Ad) of a worker, corresponding to the second commercial operator, among the workers, until the worker corresponding to the first commercial operator finishes his work. 4. Service support device, according to claim 1, characterized by the fact that: the predetermined service is any one of a delivery service that allows a vehicle's luggage compartment to be designated as a delivery address for a package, a pick-up service that allows the luggage compartment to be designated as a pick-up address for a paPetition 870180139491, of 10/09/2018, p. 196/301 3/7 cote, and a collection service that allows the luggage compartment to be designated as a collection address for an article; the information processing device is configured to provide the key information to each of a plurality of mobile terminals (20Ac, 20Ad) of the workers who conduct the work of delivering the package, collecting the package, or collecting the item, the job corresponding to the predetermined service; the information processing device is configured so that, when a mobile terminal (20Ac) of a worker, corresponding to the first commercial operator, among the workers, arrives in an area within a predetermined range of distance from the vehicle, provide the key information for the worker's mobile terminal, corresponding to the first commercial operator; and the information processing device is configured to, when a mobile terminal (20Ad) of a worker, corresponding to the second commercial operator, among the workers, reaches the area within the predetermined range of distance from the vehicle, in a situation in which the worker, corresponding to the first commercial operator, is carrying out the work based on the use of the key information by the worker's mobile terminal, corresponding to the first commercial operator, providing the key information to the worker's mobile terminal, corresponding to the second commercial operator, at a time when the worker, corresponding to the first commercial operator, finished his job. 5. Service support device, according to claim 1, characterized by the fact that: the predetermined service is any one of a delivery service that allows a luggage compartment of the vehicle Petition 870180139491, of 10/09/2018, p. 197/301 4/7 is designated as a delivery address for a package, a pick-up service that allows the baggage compartment to be designated as a pick-up address for a package, and a pick-up service that allows the baggage compartment to be designated as a collection address for an article; the information processing device is configured to provide the key information for each of a plurality of mobile terminals (20Ac, 20Ad) of the workers who conduct the work of delivering the package, collecting the package or collecting the article, the corresponding work predetermined service; the information processing device is configured to limit the number of times that key information is available to a predetermined number of times; and the information processing device is configured to, when a mobile terminal (20Ac) of a worker, corresponding to the first commercial operator, among the workers, used the key information for the predetermined number of times, to supply the key information to the mobile terminal (20Ad) of a worker corresponding to the second commercial operator, among the workers. Service support device according to any one of claims 3 to 5, characterized by the fact that the information processing device is configured to relay the information between the worker's mobile terminal in a bidirectional manner corresponding to the first commercial operator and the worker’s mobile terminal, corresponding to the second commercial operator. 7. Service support device, according to claim 1, characterized by the fact that the processing device Petition 870180139491, of 10/09/2018, p. 198/301 5/7 information itch is configured so that, when a vehicle usage schedule, associated with the predetermined service corresponding to the first commercial operator, is configured in a first period, maintain a period that conflicts with the first period so that a schedule vehicle usage, associated with the predetermined service corresponding to the second commercial operator, is not configured in the period. 8. Service support device, according to claim 7, characterized by the fact that: the predetermined service includes a delivery service that allows a vehicle's luggage compartment to be designated as a delivery address for a product that is ordered on a website corresponding to e-commerce; and the information processing device is configured to, when a first period of time has already been designated as a period of delivery time for the product with the delivery service corresponding to the first commercial operator, disable the user of the vehicle preventing it select, as a delivery time period for a product with delivery service corresponding to the second commercial operator, a time period that conflicts with the first time period on the same date on the network website. Service support device according to any one of claims 1 to 8, characterized by the fact that the vehicle user is a regular user of the vehicle. Service support device according to any one of claims 1 to 9, characterized by the fact that it additionally comprises a communication device (31) configured to carry out a bidirectional communication with each one of the vehicle, the terminal mobile, and an external device (40) Petition 870180139491, of 10/09/2018, p. 199/301 6/7 through a predetermined communication network. Service support device according to any one of claims 1 to 10, characterized in that the key information additionally includes the information for locking the vehicle. Service support device according to any one of claims 1 to 11, characterized in that the predetermined transmission signal includes the key information. 13. Service support method that is performed by a service support device (30), the service support method characterized by the fact that it comprises: provide key information to a mobile terminal (20; 20Ac; 20Ad; 20B), the mobile terminal corresponding to each of a plurality of commercial operators that provide a vehicle user (10; 10A; 10B) with a predetermined service using the vehicle, the key information being the information to unlock the vehicle, start the vehicle, or unlock and start the vehicle when a predetermined transmission signal is transmitted to the vehicle; and when the mobile terminal corresponding to a first commercial operator, among the plurality of commercial operators, uses the key information, performing the coordination so that the mobile terminal, corresponding to a second commercial operator, among the plurality of commercial operators, does not use the key information. 14. Non-transitory computer-readable recording medium characterized by the fact that it stores a service support program that causes an information processing device (32) to execute instructions for: provide key information for a mobile terminal Petition 870180139491, of 10/09/2018, p. 200/301 7/7 (20; 20Ac; 20Ad; 20B), the mobile terminal corresponding to each of a plurality of commercial operators that provide a user of a vehicle (10; 10A; 10B) with a predetermined service using the vehicle, the information key being the information to unlock the vehicle, start the vehicle, or unlock and start the vehicle when a predetermined transmission signal is transmitted to the vehicle; and when the mobile terminal, corresponding to a first commercial operator, among the plurality of commercial operators, uses the key information, performing the coordination so that the mobile terminal corresponding to a second commercial operator, among the plurality of commercial operators, does not use the key information.